CVE-2026-25725: Claude Code Sandbox Escape
A sandbox escape vulnerability in Claude Code (CVSS 7.7) allows an attacker with code execution inside the sandbox to create a malicious…
Tag: arbitrary code execution
Adobe Patches Critical ColdFusion and Campaign Classic Flaws with Multiple CVSS 10.0 Ratings
Adobe has released security updates addressing multiple critical vulnerabilities in ColdFusion, Commerce, and Campaign Classic. The most severe include three CVSS 10.0…
CVE-2026-48273: Eval Injection in Adobe ColdFusion
A CVSS 9.9 eval injection vulnerability in Adobe ColdFusion that could lead to arbitrary code execution. Fixed in versions 2025.0.12 and 2023.0.23.
CVE-2026-48381: SQL Injection in Adobe Campaign Classic
A CVSS 9.0 SQL injection vulnerability in Adobe Campaign Classic that could lead to arbitrary code execution. Fixed in ACC v7 7.4.4…
SAP Commerce Cloud Critical Flaw CVE-2026-58231 Allows Unauthenticated RCE
SAP has released patches for a maximum-severity vulnerability in Commerce Cloud (Data Hub Adapter) that could allow unauthenticated attackers to execute arbitrary…
CVE-2026-48392: Out-of-Bounds Write in Adobe Bridge
CVE-2026-48392 is a high-severity vulnerability in Adobe Bridge with a CVSS score of 7.8. It is an out-of-bounds write issue that could…
CVE-2026-48393: Out-of-Bounds Write in Adobe Bridge
CVE-2026-48393 is a high-severity vulnerability in Adobe Bridge with a CVSS score of 7.8. It is an out-of-bounds write issue that could…
CVE-2026-48394: Out-of-Bounds Write in Adobe Bridge
CVE-2026-48394 is a high-severity vulnerability in Adobe Bridge with a CVSS score of 7.8. It is an out-of-bounds write issue that could…
Adobe Patches Critical Campaign Classic Flaw Allowing Code Execution Without User Interaction
Adobe has released security updates to address a maximum-severity vulnerability in Campaign Classic (ACC), its enterprise marketing automation platform. The flaw, tracked…
CVE-2026-48391: Untrusted Search Path in Adobe Bridge
CVE-2026-48391 is a critical vulnerability in Adobe Bridge with a CVSS score of 8.2. It is an untrusted search path issue that…