HackerFeeds

CyberSecurity News

Max severity Adobe ColdFusion flaw now exploited in attacks

BleepingComputer
· July 6, 2026
Vulnerabilities

AI summary

A maximum-severity vulnerability in Adobe ColdFusion, identified as CVE-2026-48282, is being exploited by attackers, according to a warning from the Canadian Center for Cyber Security. The CCCS issued this warning on Thursday, indicating that active exploitation of this flaw is currently underway.

Vulnerabilities mentioned

CVE-2026-48282
CRITICAL
CVSS 10

ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed.

Read the full article at BleepingComputerwww.bleepingcomputer.com/news/security/max-severity-adobe-coldfusion-flaw-now-exploited-in-attacks/

This is an AI-generated brief aggregated by HackerFeeds for convenience and grounded in the source’s own summary; the related CVE, threat-group and country data is from HackerFeeds’ own indexes. The original article is the authoritative source — all rights belong to BleepingComputer.