PT-2026-53902 · Adobe · Coldfusion
Published
2026-06-30
·
Updated
2026-07-02
·
CVE-2026-48281
CVSS v3.1
10
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
ColdFusion versions 2025.9 and 2023.20 and earlier
Description
Improper input validation allows for arbitrary code execution in the context of the current user. This issue can be exploited without requiring any user interaction.
Recommendations
Update ColdFusion versions 2025.9 and 2023.20 and earlier to the patched version.
Fix
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Coldfusion