CVE-2026-48440: ColdFusion | Heap-based Buffer Overflow (CWE-122)
ColdFusion is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-48440?
CVE-2026-48440 has a severity rating of high with a CVSS score of 8.1.
How do I fix CVE-2026-48440?
To fix CVE-2026-48440, update Adobe ColdFusion to the latest version that resolves this heap-based buffer overflow vulnerability.
What type of vulnerability is CVE-2026-48440?
CVE-2026-48440 is a heap-based buffer overflow vulnerability that may lead to arbitrary code execution.
Can CVE-2026-48440 be exploited without user interaction?
Yes, exploitation of CVE-2026-48440 does not require any user interaction.
What are the potential consequences of exploiting CVE-2026-48440?
Exploiting CVE-2026-48440 could result in arbitrary code execution in the context of the current user.