← CVE Intelligence

CVE-2026-48347

Animate | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78) PUBLISHED

Description (CNA)

Animate is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

Affected (CNA)

Vendor / productVersions
Adobe / Adobe Animate 2023affected 0 through 23.0.15; unaffected 23.0.16
Adobe / Adobe Animate 2024affected 0 through 24.0.13; unaffected 24.0.14

CWE

CWE-78

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.