CVE-2026-48363

Katalog CVE

CVSS 8.2 · High EPSS 0,27%

Kerentanan Uncontrolled Search Path Element pada adobe coldfusion. Skor CVSS 3.1 8.2 (High) menurut adobe.com.

Deskripsi (NVD)

ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

Rincian

Terbit di NVD

13 Juli 2026

Terakhir diubah

28 Agustus 2026

Status NVD

Analyzed

CVSS 3.1

8.2 (High), sumber adobe.com
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-427: Uncontrolled Search Path Element

EPSS (30 hari)

0,27% peluang dieksploitasi; lebih tinggi dari 17,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://helpx.adobe.com/security/products/coldfusion/apsb26-68.html advisory vendor