CVE-2026-48281: ColdFusion | Improper Input Validation (CWE-20)
Published Jun 30, 2026
·Updated
ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed.
Affected Software
32 affected components
Adobe ColdFusion>2023.20<2025.9
Adobe ColdFusion=2023
Adobe ColdFusion=2023-update1
Adobe ColdFusion=2023-update10
Adobe ColdFusion=2023-update11
Adobe ColdFusion=2023-update12
Adobe ColdFusion=2023-update13
Adobe ColdFusion=2023-update14
Adobe ColdFusion=2023-update15
Adobe ColdFusion=2023-update16
Adobe ColdFusion=2023-update17
Adobe ColdFusion=2023-update18
Adobe ColdFusion=2023-update19
Adobe ColdFusion=2023-update2
Adobe ColdFusion=2023-update20
Adobe ColdFusion=2023-update3
Adobe ColdFusion=2023-update4
Adobe ColdFusion=2023-update5
Adobe ColdFusion=2023-update6
Adobe ColdFusion=2023-update7
Adobe ColdFusion=2023-update8
Adobe ColdFusion=2023-update9
Adobe ColdFusion=2025
Adobe ColdFusion=2025-update1
Adobe ColdFusion=2025-update2
Adobe ColdFusion=2025-update3
Adobe ColdFusion=2025-update4
Adobe ColdFusion=2025-update5
Adobe ColdFusion=2025-update6
Adobe ColdFusion=2025-update7
Adobe ColdFusion=2025-update8
Adobe ColdFusion=2025-update9
Event History
Jun 30, 2026
CVE Published
via MITRE·03:12 PM
Data Sourced
via MITRE·03:12 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:16 PM
DescriptionSeverityWeaknessAffected Software
Jul 1, 2026
News Published
via BleepingComputer·07:34 AM
Jul 2, 2026
News Published
via BleepingComputer·07:37 AM
Frequently Asked Questions
1
What is the severity of CVE-2026-48281?
The severity of CVE-2026-48281 is rated as critical with a score of 10.
2
How do I fix CVE-2026-48281?
To fix CVE-2026-48281, update to the latest version of Adobe ColdFusion that addresses the vulnerability.
3
What risk does CVE-2026-48281 pose?
CVE-2026-48281 poses a risk score of 87, indicating a significant threat if exploited.
4
What systems are affected by CVE-2026-48281?
CVE-2026-48281 affects Adobe ColdFusion versions 2025.9, 2023.20 and earlier.
5
What type of vulnerability is CVE-2026-48281?
CVE-2026-48281 is categorized as an Improper Input Validation vulnerability (CWE-20) that may allow for arbitrary code execution.