---
id: "CVE-2026-121913"
page: "https://infrastack.ai/live/CVE-2026-121913"
kind: "vulnerability"
aliases: ["CVE-2026-121913"]
title: "Adobe Connect: incorrect authorization lets low-privileged users escalate privileges"
severity: "high"
cvss: 8.8
epss: null
exploited: false
status: "open"
category: "vendor"
products: [{"name": "Adobe Connect", "fixed": ["12.12.a", "12.11.i", "12.10.f", "12.9.a", "12.8.a"], "affected": "<= 12.12 (Windows), below 12.12.a / 12.11.i / 12.10.f / 12.9.a / 12.8.a", "ecosystem": "vendor"}]
ecosystems: []
tags: ["adobe-connect", "self-hosted", "vendor", "windows"]
not_affected_if: ["patched-build"]
published_at: "2026-11-10T22:18:27+00:00"
first_seen_at: "2026-11-10T22:27:28+00:00"
updated_at: "2026-11-10T22:39:15+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-121913", "first_seen_at": "2026-11-10T22:27:28+00:00"}, {"source": "analyst", "url": "https://www.adobe.com/trust/security/products/connect/apsb26-191.html", "first_seen_at": "2026-11-10T22:39:15+00:00", "cites": ["https://www.adobe.com/trust/security/products/connect/apsb26-191.html"]}]
exploit_sources: []
---

# Adobe Connect: incorrect authorization lets low-privileged users escalate privileges

Link for people: https://infrastack.ai/live/CVE-2026-121913 (this .md is for agents)

Adobe Connect has an incorrect authorization flaw that lets a low-privileged account gain elevated access to sensitive information or functionality. Exploitation needs no user interaction.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Adobe Connect affected <= 12.12 (Windows), below 12.12.a / 12.11.i / 12.10.f / 12.9.a / 12.8.a fixed 12.12.a, 12.11.i, 12.10.f, 12.9.a, 12.8.a

## How to check

In Adobe Connect admin, check the installed version (Windows server). Exposed if it is 12.12 or earlier and below the patched build for its branch (12.12.a, 12.11.i, 12.10.f, 12.9.a, 12.8.a).

## Fix

Update Adobe Connect on Windows to the patched build for your branch: 12.12.a, 12.11.i, 12.10.f, 12.9.a or 12.8.a (APSB26-191).

## Timeline

- 2026-11-10T22:27:28+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-121913
- 2026-11-10T22:39:15+00:00 analyst https://www.adobe.com/trust/security/products/connect/apsb26-191.html — Read Adobe APSB26-191 (Nov 10 2026): CVE listed High 8.8, Windows only, no known exploits. No vendor workaround stated.

## Documents

- [advisory] APSB26-191 Security update available for Adobe Connect https://www.adobe.com/trust/security/products/connect/apsb26-191.html

## From the sources

Adobe Connect is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to sensitive information or functionality. Exploitation of this issue does not require user interaction.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_