Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to gain elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed.
| CVE | CVE-2026-121349 |
|---|---|
| Severidad | CRITICAL |
| CVSS | 9.6 / 10 |
| CWE | CWE-22 |
| Exposición (Shodan) | sin hosts expuestos detectados actualmente |
Técnica MITRE ATT&CK
T1083 – File and Directory Discovery
Mapeo automático best-effort por clase de vulnerabilidad (CWE) -- orientación, no certificación.