Unrated severityNVD Advisory· Published Jul 28, 2026· Updated Jul 28, 2026
Bridge | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
CVE-2026-48374
Description
Bridge is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected products
1Patches
Vulnerability mechanics
References
1- helpx.adobe.com/security/products/bridge/apsb26-89.htmlmitrevendor-advisory
News mentions
1- Adobe Campaign Classic CVSS 10.0 Flaw Could Run Code Without User InteractionThe Hacker News · Aug 1, 2026