High severity · published Sep 22, 2026
CVE-2026-34689
Adobe Connect | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
8.6
CVSS
1%
EPSS
No
On KEV
Description
Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction. Scope is changed.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 64% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AC
Adobe Connect · Adobe
through 12.11 · source: vendor
AC
Adobe Connect Android Mobile App · Adobe
through 4.4 · source: vendor
CO
Connect · Adobe
before 12.12 · source: NVD
CF
Connect For Mobile · Adobe
before 4.5 · source: NVD
Affected product
AC
Adobe Connect
Adobe
More from Adobe Connect
9.9
CVE-2026-75682
Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
9.6
CVE-2026-34659
Adobe Connect | Deserialization of Untrusted Data (CWE-502)
9.6
CVE-2026-27303
Adobe Connect | Deserialization of Untrusted Data (CWE-502)
9.3
CVE-2026-75689
Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)
9.3
CVE-2026-75686
Adobe Connect | Improper Input Validation (CWE-20)