Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
2970 articles · 185100 vulns · 37/41 feeds (7d)
← Back to list
8.2
CVE-2026-48390PATCHED
adobe · bridge

Bridge | Incorrect Authorization (CWE-863)

Description

Bridge is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain unauthorized read and write access. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

Affected Products

VendorProductVersions
adobebridge0, 0

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
adobecreative cloudcert_advisory90%

References

  • https://helpx.adobe.com/security/products/bridge/apsb26-89.html(vendor-advisory)

Related News (3 articles)

Tier D
Heise Security5d ago
Kritische Schadcode-Sicherheitslücke bedroht Adobe Campaign Classic
→ No new info (linked only)
Tier B
BSI Advisories10d ago
[NEU] [hoch] Adobe Creative Cloud (Bridge und Format Plugins): Mehrere Schwachstellen
→ No new info (linked only)
Tier C
VulDB11d ago
CVE-2026-48390 | Adobe Bridge improper authorization
→ No new info (linked only)
CVSS 3.18.2 HIGH
VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
CISA KEV❌ No
Actively exploited❌ No
Patch available
16.0.615.1.7
CWECWE-863
PublishedJul 28, 2026
Trending Score24
Source articles3
Independent3
Info Completeness0/14
Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

CRITICALCVE-2026-48449
Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)
Trending: 32
HIGHCVE-2026-48448
Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
Trending: 25
CRITICALCVE-2026-48333
Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)
Trending: 25
CRITICALCVE-2026-48330
Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
Trending: 25
CRITICALCVE-2026-48323
Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)
Trending: 25

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Jul 28, 2026
Discovered by ZDM
Jul 28, 2026
Patch Available
Jul 29, 2026