CVE-2026-48319: ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-48319?
CVE-2026-48319 has a severity score of 9.1, categorizing it as critical.
How do I fix CVE-2026-48319?
To address CVE-2026-48319, update to the latest version of Adobe ColdFusion as recommended by the vendor.
What type of vulnerability is CVE-2026-48319?
CVE-2026-48319 is classified as a Path Traversal vulnerability, specifically involving improper limitations on pathnames.
What are the potential impacts of exploiting CVE-2026-48319?
Exploitation of CVE-2026-48319 could lead to arbitrary code execution in the context of the current user.
Does CVE-2026-48319 require user interaction for exploitation?
No, exploitation of CVE-2026-48319 does not require user interaction.