Adobe Security Bulletin

Last updated on May 12, 2026

Security update available for Adobe Connect | APSB26-50

Bulletin ID

Date published

Priority

APSB26-50

May 12, 2026

3

style

grid width 12

Summary

Adobe has released a security update for Adobe Connect. This update resolves critical vulnerabilities that could lead to arbitrary code execution and privilege escalation.

Adobe is not aware of any exploits in the wild for any of the issues addressed in these updates.

Affected Product Versions

Product

Version

Platform

Adobe Connect Desktop Application

2025.9.15 (Windows)
2025.8.157 (macOS)

Windows and macOS

style

grid width 12

Solution

Adobe categorizes these updates with the following priority ratings and recommends users update their installation to the latest version.

Product

Version

Platform

Priority

Availability

Adobe Connect Desktop Application

2026.3.125 (Windows) 2026.01.39 (macOS)

Windows and macOS

3

Release Notes

style

grid width 12

Vulnerability Details

Vulnerability category

Vulnerability impact

Severity

CVSS base score

CVSS vector

CVE number

Deserialization of Untrusted Data (CWE-502)

Arbitrary code execution

Critical

9.6

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

CVE-2026-34659

Incorrect Authorization (CWE-863)

Privilege escalation

Critical

9.3

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N

CVE-2026-34660

Acknowledgments

Adobe would like to thank the following researchers for reporting these issues and for working with Adobe to help protect our customers:

Laish (a_l) -- CVE-2026-34659, CVE-2026-34660

NOTE: Adobe has a public bug bounty program with Intigriti. If you are interested in working with Adobe as an external security researcher, please check out https://app.intigriti.com/programs/adobe/adobepublic/detail.

For more information, visit https://www.adobe.com/trust/security/bug-bounty.html, or email PSIRT@adobe.com.

CardTitle

APSB26-50

CardDescription

Priority 3 Security update

CardImage

Created

2026-05-12