---
title: Adobe Connect Desktop/Mobile critical code injection CVE-2026-48360 (CVSS 9.6): update Windows to 2026.9.61, Mac Silicon 2026.10.66, Mac Intel 2026.10.170, Android Mobile 4.5 | ctxsec
url: https://ctxsec.com/items/adobe-connect-apsb26-182-cve-2026-48360
description: ""
status: "official (Adobe APSB26-182, Oct 27); no known exploitation"
published: 2026-10-28
---

> 

[← Cybersecurity News](/news) · [markdown](/items/adobe-connect-apsb26-182-cve-2026-48360.md)

official (Adobe APSB26-182, Oct 27); no known exploitation

2026-10-28

### Adobe Connect Desktop/Mobile critical code injection CVE-2026-48360 (CVSS 9.6): update Windows to 2026.9.61, Mac Silicon 2026.10.66, Mac Intel 2026.10.170, Android Mobile 4.5

Adobe's priority-2 bulletin [APSB26-182](https://www.adobe.com/trust/security/products/connect/apsb26-182.html) (Oct 27) fixes **CVE-2026-48360**, a critical code-injection flaw (CVSS 9.6, network, no privileges, user interaction) that can lead to arbitrary code execution in Adobe Connect Desktop and Adobe Connect Mobile for Android. Adobe is not aware of exploitation.

Affected: Desktop Windows **v2026.8.51 and below**, Mac Silicon **v2026.08.45 and below**, Mac Intel **v2026.01.39 and below**; Mobile Android **4.4 and earlier**. Fixed: Windows **2026.9.61**, Mac Silicon **2026.10.66**, Mac Intel **2026.10.170**, Mobile Android **4.5**. Credit: researcher a_l.

Sources: [Adobe: APSB26-182 Security update available for Adobe Connect (Oct 27)](https://www.adobe.com/trust/security/products/connect/apsb26-182.html) · [The Hacker News: Adobe Fixes 8 Critical Campaign Classic Flaws (Oct 28)](https://thehackernews.com/2026/10/adobe-fixes-8-critical-campaign-classic.html)