PatchTheCVEbridge vulnerabilities and fixes
Recent CVEs affecting bridge, with upgrade or downgrade steps. 8 tracked.
bridge has 8 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 8. Most recent: 2026-07-28. Highest priority: CVE-2026-48395 (score 35/100).
- CVE-2026-48395 HIGH 8.6 UPGRADE Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in
- CVE-2026-48396 HIGH 8.6 UPGRADE Bridge is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution i
- CVE-2026-48374 HIGH 7.8 UPGRADE Bridge is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulner
- CVE-2026-48390 HIGH 8.2 UPGRADE Bridge is affected by an Incorrect Authorization vulnerability that could result in privilege escalation
- CVE-2026-48391 HIGH 8.2 UPGRADE Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in
- CVE-2026-48392 HIGH 7.8 UPGRADE Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in th
- CVE-2026-48393 HIGH 7.8 UPGRADE Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in th
- CVE-2026-48394 HIGH 7.8 UPGRADE Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in th
FAQ
How do I fix bridge vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is bridge being exploited right now?
None of the tracked bridge CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which bridge CVE should I patch first?
CVE-2026-48395 currently ranks highest (35/100): Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in .