Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
5005 articles · 188942 vulns · 37/41 feeds (7d)
← Back to list
8.6
CVE-2026-48441PATCHED
adobe · lightroom classic

Lightroom Classic | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

Description

Lightroom Classic is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

Affected Products

VendorProductVersions
adobelightroom classic0

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
adobecreative cloudcert_advisory90%

References

  • https://helpx.adobe.com/security/products/lightroom/apsb26-94.html(vendor-advisory)

Related News (3 articles)

Tier B
BSI Advisories9h ago
[NEU] [hoch] Adobe Creative Cloud (Lightroom Classic): Mehrere Schwachstellen ermöglichen Codeausführung
→ No new info (linked only)
Tier D
Heise Security10h ago
Patchday Adobe: Schadcode-Schlupflöcher bedrohen Campaign Classic und ColdFusion
→ No new info (linked only)
Tier C
VulDB23h ago
CVE-2026-48441 | Adobe Lightroom Classic up to 15.4.1 path traversal
→ No new info (linked only)
CVSS 3.18.6 HIGH
VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
CISA KEV❌ No
Actively exploited❌ No
Patch available
15.5
CWECWE-22
PublishedAug 11, 2026
Trending Score46
Source articles3
Independent3
Info Completeness0/14
Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

CRITICALCVE-2026-71362
Adobe Commerce | Incorrect Authorization (CWE-863)
Trending: 62
CRITICALCVE-2026-48362
ColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
Trending: 62
HIGHCVE-2026-48386
ColdFusion | Use of a Broken or Risky Cryptographic Algorithm (CWE-327)
Trending: 47
HIGHCVE-2026-21279
ColdFusion | Improper Input Validation (CWE-20)
Trending: 47
HIGHCVE-2026-48414
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Trending: 46

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Aug 11, 2026
Discovered by ZDM
Aug 11, 2026
Patch Available
Aug 12, 2026