Adobe Coldfusion — CVE-2026-48321 (Critical)
Critical vendor advisory
CVE-2026-48321
Summary
ColdFusion is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain unauthorized read and write access. Exploitation of this issue does not require user interaction. Scope is changed.
Why it matters
This CVE carries a CRITICAL severity rating (CVSS 9.3) in Adobe Coldfusion. Patch or mitigate promptly. EPSS percentile: 15%.
Operator check
Review CVE-2026-48321 in your asset inventory. Apply patches per vendor guidance and verify Coldfusion is not exposed. CVSS score: 9.3. EPSS probability: 0.2%; percentile: 15%.
Sources
PatchBrief uses public sources. It does not scan environments, verify exposure, or replace vendor guidance.