CVE-2026-48338

Name of the Vulnerable Software and Affected Versions ColdFusion (affected versions not specified)

Description ColdFusion contains a Path Traversal issue, which occurs when an application uses user-supplied input to construct a pathname that is intended to be within a restricted directory but is not properly limited. This allows a remote attacker to perform arbitrary file system reads and gain unauthorized access to sensitive files and directories outside the intended scope without requiring user interaction.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.