CVE-2026-48277: ColdFusion | Improper Input Validation (CWE-20)
ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2026-48277?
The severity of CVE-2026-48277 is classified as critical with a score of 10.
How do I fix CVE-2026-48277?
To fix CVE-2026-48277, upgrade to the latest version of Adobe ColdFusion that addresses the input validation vulnerability.
What vulnerability does CVE-2026-48277 address?
CVE-2026-48277 addresses an Improper Input Validation vulnerability that can lead to arbitrary code execution.
Which versions of Adobe ColdFusion are affected by CVE-2026-48277?
Adobe ColdFusion versions 2025.9, 2023.20 and earlier are affected by CVE-2026-48277.
Does exploitation of CVE-2026-48277 require user interaction?
No, exploitation of CVE-2026-48277 does not require user interaction.