PT-2026-53902
CVE-2026-48281
·
Published
2026-06-30
·
Updated
2026-08-24
Description by
CVSS 3.1
10
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
ColdFusion versions 2025.9 and 2023.20 and earlier
Description
Improper input validation allows for arbitrary code execution in the context of the current user. This issue can be exploited without requiring any user interaction.
Recommendations
Update ColdFusion versions 2025.9 and 2023.20 and earlier to the patched version.
Found an issue in the description? Have something to add? Feel free to write us 👾