PT-2026-53904
CVE-2026-48283
·
Published
2026-06-30
·
Updated
2026-08-24
Description by
CVSS 3.1
10
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Adobe ColdFusion versions 2025.9 and earlier
Description
An unrestricted upload of files with dangerous types allows for arbitrary code execution in the context of the current user. This issue can be exploited without requiring any user interaction.
Recommendations
Update Adobe ColdFusion to a version later than 2025.9.
Found an issue in the description? Have something to add? Feel free to write us 👾