PT-2026-48272 · Adobe · Coldfusion

Published 2026-06-09 · Updated 2026-06-09 · CVE-2026-47932

Mitre

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access unauthorized files or directories outside the intended restrictions. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-47932

Affected Products

Coldfusion

References · 2

• https://helpx.adobe.com/security/products/coldfusion/apsb26-64.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-47932 · Security Note