PT-2026-53901 · Adobe · Coldfusion

Published 2026-06-30 · Updated 2026-06-30 · CVE-2026-48277

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ColdFusion versions 2025.9 and earlier ColdFusion versions 2023.20 and earlier

Description An improper input validation issue allows for arbitrary code execution in the context of the current user. This flaw can be exploited without any user interaction.

Recommendations Update ColdFusion versions 2025.9 and earlier to a patched version. Update ColdFusion versions 2023.20 and earlier to a patched version.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2026-48277

Affected Products

Coldfusion

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-48277 · Security Note
• https://helpx.adobe.com/security/products/coldfusion/apsb26-68.html · Vendor Advisory
• https://twitter.com/OrizonCyber/status/2072032451816235198 · Twitter Post
• https://twitter.com/AretiqAI/status/2072055173942222918 · Twitter Post