CVE-2026-48390: Bridge | Incorrect Authorization (CWE-863)
Published Jul 28, 2026
·Updated
Bridge is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain unauthorized read and write access. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.
Affected Software
3 affected components
Bridge
Adobe Bridge<15.1.7
Adobe Bridge>=16.0<16.0.6
Remediation
Event History
Jul 28, 2026
CVE Published
via MITRE·05:58 PM
Data Sourced
via MITRE·05:58 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:17 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-48390?
CVE-2026-48390 has a high severity rating of 8.2.
2
How do I fix CVE-2026-48390?
To fix CVE-2026-48390, update Bridge to the latest version provided by Adobe.
3
What type of vulnerability is CVE-2026-48390?
CVE-2026-48390 is an Incorrect Authorization vulnerability, categorized under CWE-863.
4
What impact does CVE-2026-48390 have on my system?
CVE-2026-48390 could lead to privilege escalation, allowing unauthorized read and write access.
5
What is required to exploit CVE-2026-48390?
Exploitation of CVE-2026-48390 requires user interaction, specifically that a victim opens a malicious file.