← Back to browse · API

CVE-2021-40719

Severity
CRITICAL
CVSS
9.8
EPSS
0.03419
Risk score
40.4
CISA KEV
No
PoC
No
Published
2021-10-21
Modified
2025-04-23
First seen
2026-08-07
Aliases
EUVD-2021-27885, GHSA-RJ2H-5W53-CG32
Products
Tanium:Connect unspecified ≤11.2.3, Tanium:Connect unspecified ≤None
Sources
euvd EUVD-2021-27885

Description

Adobe Connect version 11.2.3 (and earlier) is affected by a Deserialization of Untrusted Data vulnerability to achieve arbitrary method invocation when AMF messages are deserialized on an Adobe Connect server. An attacker can leverage this to execute remote code execution on the server.

References