Adobe Connect Multiple Critical Vulnerabilities Allowing Arbitrary Code Execution, CVSS 9.6

CERT-Bund published a critical security advisory for Adobe Connect identifying multiple vulnerabilities with a CVSS Base Score of 9.6. The affected products are Adobe Connect versions prior to 12.11 and Adobe Connect Desktop Application versions prior to 2025.9. A remote, anonymous attacker can exploit these vulnerabilities to execute arbitrary code or perform cross-site scripting attacks.

Organizations using Adobe Connect must immediately update to the patched versions (12.11 for the main platform and 2025.9 for the desktop application) to mitigate the risk of remote code execution attacks. Given the critical CVSS score and the availability of exploits, this vulnerability poses significant risk to any organization running affected versions of Adobe Connect.