PT-2026-53904 · Adobe · Coldfusion

Published 2026-06-30 · Updated 2026-06-30 · CVE-2026-48283

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions 2025.9 and earlier

Description An unrestricted upload of files with dangerous types allows for arbitrary code execution in the context of the current user. This issue can be exploited without requiring any user interaction.

Recommendations Update Adobe ColdFusion to a version later than 2025.9.

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2026-48283

Affected Products

Coldfusion

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-48283 · Security Note
• https://helpx.adobe.com/security/products/coldfusion/apsb26-68.html · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/2072014859193987525 · Twitter Post