security_identifier

CVE-2026-75682

SQL injection vulnerability in Adobe Connect, scored CVSS 9.9, that can let a low-privileged authenticated user execute arbitrary code.

Current clusters

build1 publisher

Adobe Connect's code-execution flaw sits behind a login that students and contractors already hold

Adobe's Connect 12.12 fixes CVE-2026-75682, a 9.9 SQL injection that reaches code execution from any low-privileged account. Connect deployments typically hand those accounts to students, contractors and partners, so the login barrier stops few attackers.

Publishers:dev.to

Reality

Evidence45
Adoption: Insufficient
Hype gap+15
Incentives: Insufficient
Confidence50

build1 publisher

One low-privileged login turns Adobe Connect's 9.9 SQL injection into code execution

Adobe's September Connect patch fixes a CVSS 9.9 SQL injection that lets a low-privileged user run arbitrary code. Connect gives accounts to outside students and partners, so that bar is low enough to justify a separate 12.12 window even with no exploitation reported.

Publishers:dev.to

Reality

Evidence55
Adoption40
Hype gap+10
Incentives: Insufficient
Confidence50