Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
3843 articles · 169523 vulns · 37/41 feeds (7d)
← Back to list
10.0
CVE-2026-48277PATCHED
adobe · coldfusion

ColdFusion | Improper Input Validation (CWE-20)

Description

ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed.

Affected Products

VendorProductVersions
adobecoldfusion0

References

  • https://helpx.adobe.com/security/products/coldfusion/apsb26-68.html(vendor-advisory)

Related News (1 articles)

Tier C
VulDB15h ago
CVE-2026-48277 | Adobe ColdFusion up to 2023.20/2025.9 input validation (apsb26-68)
→ No new info (linked only)
CVSS 3.110.0 CRITICAL
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA KEV❌ No
Actively exploited❌ No
Patch available
https://helpx.adobe.com/security/products/coldfusion/apsb26-68.html
CWECWE-20
PublishedJun 30, 2026
Trending Score43
Source articles1
Independent1
Info Completeness0/14
Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

CRITICALCVE-2026-48282EXP
ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
Trending: 60
CRITICALCVE-2026-48314EXP
ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
Trending: 56
HIGHCVE-2026-48285EXP
ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)
Trending: 52
CRITICALCVE-2026-48315EXP
ColdFusion | Improper Input Validation (CWE-20)
Trending: 51
CRITICALCVE-2026-48281
ColdFusion | Improper Input Validation (CWE-20)
Trending: 43

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Jun 30, 2026
Discovered by ZDM
Jun 30, 2026
Patch Available
Jul 1, 2026