CVE-2026-21331

published 2026-04-14

CVE-2026-21331: Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a…

medium 6.1 CVSS 3.1

AV N AC L PR N UI R S C C L I L A N

Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Scope is changed.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
adobe	adobe_connect	<= 12.10	—
adobe	connect	< 12.11	12.11
adobe	connect_desktop_application	< 2025.9.15	2025.9.15
adobe	connect_desktop_application	<= 2025.3	—

CWE-79