THREATOPS

THREAT OPS › CVEs › CVE-2026-48282

CVE-2026-48282 — Adobe ColdFusion Path Traversal Vulnerability

CISA KEVExploited: confirmedAdobe

Adobe ColdFusion contains a path traversal vulnerability that could lead to arbitrary code execution in the context of the current user.

Vulnerability details

Affected productsColdFusion
KEV remediation due2026-07-10

Related reporting

July 2026 CVE Landscaperecordedfuture
It’s 37oC, And All We Can Think About Is ColdFusion (Adobe ColdFusion Security Bulletin APSB26-68 CVE Bonanza)watchtowr
CVE-2026-48282: Mitigating a Critical Vulnerability in Adobe ColdFusionakamai_blog
[CISA KEV] CVE-2026-48282 — Adobe ColdFusion: Adobe ColdFusion Path Traversal Vulnerabilitycisa_kev