Firetruck

CVE-2026-48282

KEV
Updated Oct 7, 2026 · PUBLISHED
View KEV entry →

Description

Adobe ColdFusion contains a path traversal vulnerability that could lead to arbitrary code execution in the context of the current user.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
ColdFusion 2023Adobe / ColdFusion 2023>= 0, <= 20affected
ColdFusion 2023Adobe / ColdFusion 202321unaffected
ColdFusion 2025Adobe / ColdFusion 2025>= 0, <= 9affected
ColdFusion 2025Adobe / ColdFusion 202510unaffected