CRITICAL: CVE-2026-27245 (CVSS 9.3) — adobe connect

CVE: CVE-2026-27245

CVSS: 9.3 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N

Severity: CRITICAL

Status: Critical advisory

Affected

adobe connect
apple macos
microsoft windows
adobe connect desktop application

Summary

Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed.

Verified Sources

References

https://helpx.adobe.com/security/products/connect/apsb26-37.html

_Validated by the Lyrie Threat Intelligence Pipeline — 3 independent sources confirmed before publication. No speculation._

Lyrie Verdict

A vulnerability of this severity is exactly what Lyrie's anti-rogue-AI defense is built for: continuous, autonomous monitoring that doesn't wait for human reaction time.

#adobe #apple #microsoft #critical