CVE record · 6 sources
CVE-2026-48282
KEVCVSS 10.0Adobe ColdFusion Path Traversal Vulnerability
- Vendor
- Adobe
- Product
- ColdFusion
- CVSS
- 10.0
- CISA KEV
- listed
- Exposure class
- Web platform
Coverage
6Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Adobe ColdFusion Path Traversal Vulnerability
Adobe ColdFusion contains a path traversal vulnerability that could lead to arbitrary code execution in the context of the current user.
-
July 2026 Patch Tuesday
Patch Tuesday Watch: What Led Up to July 2026 Adobe Release date: June 30, 2026 (APSB26-68 — ColdFusion; same-day bulletin for Campaign Classic) CVE count: 11 CVEs in ColdFusion, 1 in Campaign Classic (12 total) Adobe's…
-
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-48282 Adobe ColdFusion Path Traversal Vulnerability This type of vulnerability is a…
-
Max severity Adobe ColdFusion flaw now exploited in attacks
Attackers are now exploiting a maximum-severity Adobe ColdFusion vulnerability tracked as CVE-2026-48282, according to vulnerability intelligence company KEVIntel. [...]
-
It’s 37oC, And All We Can Think About Is ColdFusion (Adobe ColdFusion Security Bulletin APSB26-68 CVE Bonanza)
We’re back, melting - we’ve tried shouting, screaming, and throwing things at the Sun, and it is just not working. Before we begin our analysis, we want to be clear - given the number of vulnerabilities fixed (and some not…
-
July 2026 CVE Landscape
In July 2026, Insikt Group® identified 85 high-impact vulnerabilities that should be prioritized for remediation, 36 of which had a Very Critical Recorded Future Risk Score. This represents a 44% increase from last month.