CVE-2026-48396 is an Incorrect Authorization vulnerability in Adobe Bridge that enables an attacker to execute arbitrary code in the context of the current user. The vulnerability requires the victim to open a malicious file, which changes the security scope and allows high impact on confidentiality, integrity, and availability. The CVSS 3.1 base score is 8.6, reflecting high severity with attack vector local, low attack complexity, no privileges required, user interaction required, and scope changed.

Successful exploitation could lead to arbitrary code execution with the current user's privileges, potentially compromising confidentiality, integrity, and availability of the affected system. The attack requires user interaction (opening a malicious file), and the scope of the impact is changed, indicating that the vulnerability affects resources beyond the initially vulnerable component.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when opening files from untrusted sources to avoid exploitation.