CVE-2026-75682 | defend.network

What is CVE-2026-75682?

Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary SQL commands, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed.

CVSS9.9 NVD 3.1

SeverityCRITICAL

ExploitationNo exploitation reported

EPSS1% · P60

Triage statusNo Known Exploit

ActionPatch within 48 hours

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CWECWE-89

NVD published2026-09-22

NVD last modified2026-09-23

Timeline

2026-09-22Published to the U.S. National Vulnerability Database (NVD)
2026-09-23NVD record last updated
2026-09-24First covered in a defend.network daily briefing

Affected product

See advisory

References

Referenced in our briefings & reports

Check Point RCE, MikroTik SSH chain, malicious npm/Terraform packages in active exploitation (2026-09-24)

Browse all tracked CVEs in the defend.network CVE database →

🤖 This CVE page is generated by defend.network from NVD, CISA KEV, EPSS, and our verified daily briefings. Severity and exploitation data come from official sources; always verify remediation steps against the official vendor advisory before acting in production.

What is CVE-2026-75682?

Timeline

Affected product

References

Referenced in our briefings & reports

Get Critical CVE Alerts