VulnerabilityAnalyzed
CVE-2026-48390
Bridge is affected by an Incorrect Authorization vulnerability that could result in privilege escalation.
HIGH 8.2EPSS 0.19%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.19%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Bridge is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain unauthorized read and write access. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.
- CVSS 3.1
- 8.2 HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
- EPSS
- 0.19% probability · 9th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-863
- Affected
- adobe/bridge
- Source
- psirt@adobe.com
References
- https://helpx.adobe.com/security/products/bridge/apsb26-89.htmlPatch, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.