CVE-2026-48281: ColdFusion | Improper Input Validation (CWE-20)
ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2026-48281?
The severity of CVE-2026-48281 is rated as critical with a score of 10.
How do I fix CVE-2026-48281?
To fix CVE-2026-48281, update to the latest version of Adobe ColdFusion that addresses the vulnerability.
What risk does CVE-2026-48281 pose?
CVE-2026-48281 poses a risk score of 87, indicating a significant threat if exploited.
What systems are affected by CVE-2026-48281?
CVE-2026-48281 affects Adobe ColdFusion versions 2025.9, 2023.20 and earlier.
What type of vulnerability is CVE-2026-48281?
CVE-2026-48281 is categorized as an Improper Input Validation vulnerability (CWE-20) that may allow for arbitrary code execution.