PT-2026-58812 · Adobe · Coldfusion

Published 2026-07-14 · Updated 2026-07-14 · CVE-2026-48318

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Critical

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ColdFusion (affected versions not specified)

Description ColdFusion contains a Path Traversal issue, which occurs when an application uses user-supplied input to construct a pathname that is intended to be within a restricted directory but can be manipulated to access files outside that directory. This flaw allows an attacker to perform arbitrary file system reads to access sensitive files and directories without requiring user interaction.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-48318

Affected Products

Coldfusion

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-48318 · Security Note
• https://helpx.adobe.com/security/products/coldfusion/apsb26-82.html · Vendor Advisory
• https://twitter.com/OrizonCyber/status/2077166280453353851 · Twitter Post