CVE-2026-48294 - Vulnerability Details

Threat entity extracted from intelligence sources

Frequency
6
occurrences
First Seen
July 22, 2026
Last Seen
July 24, 2026

CVE-2026-48294 is a vulnerability tracked by ThreatCluster, appearing in 1 threat cluster built from 6 intelligence report mentions.

CVE-2026-48294 is a vulnerability tracked across 1 threat cluster and 6 intelligence report mentions on ThreatCluster. First observed July 22, 2026; most recent activity July 24, 2026.

Related Threat Clusters

  • Adobe Acrobat Extension Vulnerability Enables WhatsApp Data Theft

    A critical vulnerability in the Adobe Acrobat Chrome extension, tracked as CVE-2026-48294 and named HermeticReader, allows attackers to access WhatsApp Web data without authentication. The flaw affects approximately 329…

    8 articles · Updated July 22, 2026

Recent Intelligence Reports

  • Guardio Labs — guard.io · July 24, 2026
  • Adobe Acrobat extension vulnerability allowed WhatsApp data theft — Feeds.Feedburner · July 22, 2026
  • Adobe Acrobat Chrome extension bug enabled silent WhatsApp data theft — Securityaffairs.Co · July 22, 2026
  • Adobe Acrobat extension flaw allowed theft of WhatsApp Web data — Feeds.4Sysops · July 22, 2026
  • Adobe Acrobat Extension Flaw Lets Attackers Steal WhatsApp Chats From 329 Million Users — Cybersecuritynews · July 22, 2026
  • Adobe Chrome extension flaw let sites access private WhatsApp chats — Bleepingcomputer · July 22, 2026

Related Entities

Data Breach Zero-day Exploit Adobe Guardio Labs CWE-200 - Exposure of Sensitive Information CWE-287 - Improper Authentication CWE-78 - OS Command Injection T1041 - Exfiltration Over C2 Channel T1059 - Command and Scripting Interpreter T1566.002 - Spearphishing Link T1567 - Exfiltration Over Web Service Adobe Acrobat

Frequently asked questions

What is CVE-2026-48294?

CVE-2026-48294 is a vulnerability tracked by ThreatCluster, appearing in 1 threat cluster built from 6 intelligence report mentions.

Is CVE-2026-48294 still active?

The most recent intelligence report mentioning CVE-2026-48294 on ThreatCluster is dated July 24, 2026. Activity was first observed July 22, 2026, giving a tracked span from then to July 24, 2026.

What is CVE-2026-48294 associated with?

Across ThreatCluster reporting, CVE-2026-48294 most frequently co-occurs with Data Breach, Zero-day Exploit, Adobe, Guardio Labs, CWE-200 - Exposure of Sensitive Information, among 12 tracked related entities.

What are the latest developments involving CVE-2026-48294?

The most significant recent cluster is “Adobe Acrobat Extension Vulnerability Enables WhatsApp Data Theft” (8 articles · Updated July 22, 2026). CVE-2026-48294 appears across 1 threat cluster in total, listed above with sources.

How much reporting does ThreatCluster have on CVE-2026-48294?

CVE-2026-48294 appears in 6 intelligence report mentions across 1 deduplicated threat cluster, aggregated from 17,000+ monitored sources.

CVSS v3.1 Breakdown