Adobe Coldfusion — CVE-2026-48319 (Critical)
Critical vendor advisory
CVE-2026-48319
Summary
ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed.
Why it matters
This CVE carries a CRITICAL severity rating (CVSS 9.1) in Adobe Coldfusion. Patch or mitigate promptly. EPSS percentile: 57%.
Operator check
Review CVE-2026-48319 in your asset inventory. Apply patches per vendor guidance and verify Coldfusion is not exposed. CVSS score: 9.1. EPSS probability: 0.9%; percentile: 57%.
Sources
PatchBrief uses public sources. It does not scan environments, verify exposure, or replace vendor guidance.