CVE-2026-48391

HighCVSS 8.2/10Last modified Oct 23, 2026

Description

Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

Metrics

CVSS 3.1 8.2/10CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-426

Affected software

VendorProductVersions
AdobeAdobe Bridge<= 16.0.5
AdobeAdobe Bridge<= 15.1.6

References

Timeline

Published
Jul 28, 2026
Last modified
Oct 23, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-483927.8Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.CVE-2026-483937.8Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.CVE-2026-483947.8Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.CVE-2026-483958.6Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current useCVE-2026-483968.6Bridge is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current uCVE-2026-483978.6Lightroom Classic is affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the contCVE-2026-483985.4Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipuCVE-2026-483997.5Adobe Campaign Classic (ACC) is affected by a Violation of Secure Design Principles vulnerability that could result in a Security feature byCVE-2026-48408.8A security flaw has been discovered in Netcore Power 15AX up to 3.0.0.6938. Affected by this issue is the function setTools of the file /binCVE-2026-484027.8Premiere Pro is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the curreCVE-2026-484047.8Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the cuCVE-2026-484057.8Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the cu
CVE-2026-48391: High severity, CVSS 8.2 | Vulnix