CVE-2026-121351

{
  "etk_id": "ETK-2026-4103",
  "cve_id": "CVE-2026-121351",
  "display_id": "CVE-2026-121351",
  "ghsa_id": "GHSA-cg86-hhp9-fvgm",
  "euvd_id": "EUVD-2026-122979",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Path traversal in Adobe Connect",
  "summary": "Adobe Connect is affected by a path traversal vulnerability that can expose files outside the intended directory boundaries. An unauthenticated attacker with network access to an exposed instance may read sensitive files without user interaction.",
  "mitigation": "Apply Adobe's security update for the affected Adobe Connect release, using the vendor bulletin to select the applicable version. Until updates are deployed, restrict network access to Connect instances to trusted networks and users.",
  "vendor": "Adobe",
  "product": "Adobe Connect",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0, <= 12.8"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "Adobe Connect",
      "purl": null
    },
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0, <= 12.9"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "Adobe Connect",
      "purl": null
    },
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0, <= 12.10"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "Adobe Connect",
      "purl": null
    },
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0, <= 12.11"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "Adobe Connect",
      "purl": null
    },
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0, <= 12.12"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "Adobe Connect",
      "purl": null
    }
  ],
  "cwes": [
    22
  ],
  "cvss_score": 10,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 14.139854283333333,
  "t0_at": "2026-11-10T21:30:49.559000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-11-10T21:30:49.559000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-11-10T21:30:49.559000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-121351"
    }
  }
}