VulnSocial

CVE-2026-75746Patch(adobe / coldfusion)

MEDIUMCVSS 9.1 · CRITICAL

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

  • Patch adobe coldfusion systems immediately
  • Assume compromise if assets are exposed

Recommended action window: Immediate (within 24h)

NVD description

ColdFusion is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

adobe CVEsBack to dashboard
4.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-89

Priority

MEDIUM

Exploitation

ACTIVE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • coldfusion

Threat summary

  • Active exploitation appears in 1 classified signals
  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Active exploitation reported across 1 signal
  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 1 signal
  • Peaked 1d ago at 1 mentions (2026-09-08); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
adobe
Products
coldfusion

2 versions affected across 1 product

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-09-08: 1Mentions · 2026-09-09: 1Active Exploitation · 2026-09-08: 1Patch / Workaround · 2026-09-08: 1Patch / Workaround · 2026-09-09: 1Technical Details · 2026-09-08: 109-0809-09
Signal classification1 categories
Patch
2100.0%
Referenced assets2 URLs
Full discourse2 posts
  • kawn@kawn2020
    Patch

    #securityupdate #adobeupdate #adobe #ColdFusion Adobe から，Commerce で更新をリリース． 適用優先度「1」，緊急度には「Critical」 6 件． ・CVE-2026-48273 ・CVE-2026-75746 ・CVE-2026-75993 ・CVE-2026-75998 ・CVE-2026-75999 ・CVE-2026-76190 全 9 件． https://x.com/kawn2020/status/2097515258667839760

    Post summary

    Adobe released a critical patch to address nine CVEs affecting ColdFusion, including six labeled critical, providing remediation for the highlighted vulnerabilities.

    1000054
    87 followersView on X
  • Venkata Satish Guttula 🛰️@snakeyesV1
    Patch

    News: Adobe ships 170+ Sep patches. Campaign Classic CVE-2026-82004 (CVSS 10) OS command injection can run code; ColdFusion Priority 1 CVE-2026-48273 and CVE-2026-75746. Magento StyleSmuggler still in the wild. Apply Priority 1 within 3 days. https://www.securityweek.com/adobe-patches-over-170-vulnerabilities-including-commerce-zero-day/

    Post summary

    Adobe has released over 170 patches for several new high‑severity CVEs, urging swift remediation, while the Magento StyleSmuggler exploit remains active in the wild.

    00000114
    3.0K followersView on X
CPE platform detail37 entries

37 of 37 entries

PartVendorProductVersionTarget SWTarget HW
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2025--
Appadobecoldfusion2025--
Appadobecoldfusion2025--
Appadobecoldfusion2025--
Appadobecoldfusion2025--
Appadobecoldfusion2025--
Appadobecoldfusion2025--
Appadobecoldfusion2025--
Appadobecoldfusion2025--
Appadobecoldfusion2025--
Appadobecoldfusion2025--
Appadobecoldfusion2025--
Appadobecoldfusion2025--

Explore more

Back to dashboardadobe CVEscoldfusion vulnerabilities