CVE-2026-48395

HighCVSS 8.6/10Last modified Oct 23, 2026

Description

Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

Metrics

CVSS 3.1 8.6/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-426

Affected software

Vendor	Product	Versions
Adobe	Adobe Bridge	<= 16.0.5
Adobe	Adobe Bridge	<= 15.1.6

References

https://helpx.adobe.com/security/products/bridge/apsb26-89.htmlPatch, Vendor Advisory

Timeline

Published: Jul 28, 2026
Last modified: Oct 23, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-483968.6Bridge is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current u CVE-2026-483978.6Lightroom Classic is affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the cont CVE-2026-483985.4Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipu CVE-2026-483997.5Adobe Campaign Classic (ACC) is affected by a Violation of Secure Design Principles vulnerability that could result in a Security feature by CVE-2026-48408.8A security flaw has been discovered in Netcore Power 15AX up to 3.0.0.6938. Affected by this issue is the function setTools of the file /bin CVE-2026-484047.8Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the cu CVE-2026-484057.8Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the cu CVE-2026-484067.8Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the cu CVE-2026-484077.8Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the cu CVE-2026-484087.8Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the cu CVE-2026-484097.8Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the cu CVE-2026-48417.3A weakness has been identified in code-projects Online Food Ordering System 1.0. This affects an unknown part of the file form/cart.php of t