CVE-2026-48396 - CERT CVE
ID CVE-2026-48396
Sažetak Bridge is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.
Reference
CVSS
Base: 8.6
Impact: 6.0
Exploitability:1.8
Pristup
VektorSloženostAutentikacija
LOCAL LOW NONE
Impact
PovjerljivostCjelovitostDostupnost
HIGH HIGH HIGH
CVSS vektor CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Zadnje važnije ažuriranje 29-07-2026 - 05:16
Objavljeno 28-07-2026 - 19:17