PT-2026-53908 · Adobe · Coldfusion

Published 2026-06-30 · Updated 2026-06-30 · CVE-2026-48313

Positive Technologies (AI Summary)

CVSS v3.1

9.3

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions ColdFusion versions 2023.20 and earlier ColdFusion version 2025.9

Description An Improper Limitation of a Pathname to a Restricted Directory, also known as Path Traversal, allows an attacker to access sensitive files and directories outside the intended access scope. This issue enables arbitrary file system read and limited write access without requiring user interaction.

Recommendations Update ColdFusion versions 2023.20 and earlier to a patched version. Update ColdFusion version 2025.9 to a patched version.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-48313

Affected Products

Coldfusion

References · 4

• https://helpx.adobe.com/security/products/coldfusion/apsb26-68.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-48313 · Security Note
• https://twitter.com/VulmonFeeds/status/2072009739748114644 · Twitter Post
• https://twitter.com/AretiqAI/status/2072055173942222918 · Twitter Post