Adobe Coldfusion — CVE-2026-48284 (Critical)

Date Jul 14, 2026

Type Vendor advisory

Signal Critical vendor advisory

Vendor / Product Adobe · Coldfusion

CVE CVE-2026-48284

Critical vendor advisory CVE-2026-48284

Summary

ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed.

Why it matters

This CVE carries a CRITICAL severity rating (CVSS 9.6) in Adobe Coldfusion. Patch or mitigate promptly. EPSS percentile: 80%.

Operator check

Review CVE-2026-48284 in your asset inventory. Apply patches per vendor guidance and verify Coldfusion is not exposed. CVSS score: 9.6. EPSS probability: 2.2%; percentile: 80%.

Sources

NVD — CVE-2026-48284 Source reference

PatchBrief uses public sources. It does not scan environments, verify exposure, or replace vendor guidance.

Get watched-vendor alerts Subscribe free Back to feed