VulnSocial

CVE-2026-48363Disclosure(adobe / coldfusion)

LOWCVSS 8.2 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch adobe coldfusion systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.

adobe CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-427

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • coldfusion

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 3 signals
  • Disclosure: 2 classified signals
  • Peaked 1d ago at 2 mentions (2026-07-13); latest day: 1
  • 3 total mentions across 2 days

Affected systems

Vendors
adobe
Products
coldfusion

2 versions affected across 1 product

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-07-13: 2Mentions · 2026-07-15: 1Patch / Workaround · 2026-07-15: 1Technical Details · 2026-07-13: 2Technical Details · 2026-07-15: 107-1307-15
Signal classification2 categories
Disclosure
266.7%
Patch
133.3%
Referenced assets2 URLs
By indicator
Classification over time
DateTotalLabels
2026-07-132
Disclosure2
2026-07-151
Patch1
Full discourse3 posts
  • DFIR Lab@DFIR_Lab
    Patch

    🚨 HIGH: CVE-2026-48363 (CVSS 8.2) Adobe ColdFusion 2025.9, 2023.20 & earlier affected by Uncontrolled Search Path vulnerability. Arbitrary code execution possible via malicious file. User interaction required. Patch immediately. #CVE #PatchNow #CyberSecurity https://t.co/xmUsTez5QD

    Post summary

    Adobe ColdFusion 2025.9, 2023.20, and earlier versions are affected by CVE-2026-48363, a CVSS 8.2 uncontrolled search path vulnerability allowing arbitrary code execution via a malicious file; users are urged to apply the patch immediately.

    0000041
    75 followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-48363 ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the… https://www.cve.org/CVERecord?id=CVE-2026-48363 ----- Traducción: CVE-2026-48363 Col… http://infoflow.cloud`

    Post summary

    The tweet announces CVE‑2026‑48363 for ColdFusion, outlining its type, affected versions, and linking to the CVE record, with no evidence of exploitation, patching, or PoC.

    0000044
    92 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-48363 ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the… https://www.cve.org/CVERecord?id=CVE-2026-48363

    Post summary

    The text announces CVE‑2026‑48363 as an Uncontrolled Search Path Element flaw in certain ColdFusion versions that could enable arbitrary code execution.

    00000693
    57.8K followersView on X
CPE platform detail31 entries

31 of 31 entries

PartVendorProductVersionTarget SWTarget HW
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2025--
Appadobecoldfusion2025--
Appadobecoldfusion2025--
Appadobecoldfusion2025--
Appadobecoldfusion2025--
Appadobecoldfusion2025--
Appadobecoldfusion2025--
Appadobecoldfusion2025--
Appadobecoldfusion2025--
Appadobecoldfusion2025--

Explore more

Back to dashboardadobe CVEscoldfusion vulnerabilities