CVE-2026-34615 — Deserialization of Untrusted Data in Adobe Connect

CWE-502 — Deserialization of Untrusted Data4 documents4 sources
Severity
9.3CRITICALNVD
EPSS
1.4%
top 19.25%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Adobe Connect
Timeline
PublishedApr 14

Description

Adobe Connect versions 2025.3, 12.10 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:NExploitability: 2.8 | Impact: 5.8

Affected Packages1 packages

▶CVEListV5adobe/adobe_connect12.10

🔴Vulnerability Details

3
VulDB
Adobe Connect up to 12.10/2025.3 deserialization (apsb26-37)↗2026-04-14
▶
GHSA
GHSA-577g-xxrf-8j42: Adobe Connect versions 2025↗2026-04-14
▶
CVEList
Adobe Connect | Deserialization of Untrusted Data (CWE-502)↗2026-04-14
▶
CVE-2026-34615 — Deserialization of Untrusted Data | cvebase