VulnerabilityBleeping Computer
10.0 — CRITICAL
Max severity Adobe ColdFusion flaw now exploited in attacks
Attackers are now exploiting a maximum-severity Adobe ColdFusion vulnerability tracked as CVE-2026-48282, the Canadian Center for Cyber Security (CCCS) warned on Thursday. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
Attackers are exploiting a maximum-severity Adobe ColdFusion vulnerability (CVE-2026-48282) that can lead to remote code execution, targeting systems without privileges, and affecting versions 2025.9, 2023.20, and earlier.
⚙️Technical Details
Affected Systems
Adobe ColdFusion
Attack Vectors
NETWORKLOCAL
💥Impact Assessment
Severity: CRITICAL
Who Is at Risk
Admins of unpatched Adobe ColdFusion systems
🛡️Recommended Actions
1Apply the latest security updates for Adobe ColdFusion as soon as possible
2Monitor system logs for suspicious activity and implement additional security measures
3Conduct a thorough vulnerability assessment to identify and patch any other potential weaknesses
📦Affected Products
Adobe ColdfusionAdobe AcrobatAdobe Acrobat DcAdobe Acrobat Reader DcApple MacosMicrosoft Windows
🔐NVD Verified DataVERIFIED
CVE-2026-48282 ↗CVSS 10 — CRITICAL
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HWeaknesses
CWE-22
Affected Products (CPE)
Adobe Coldfusion
CVE-2026-34621 ↗CVSS 8.6 — HIGH
Attack Vector
LOCAL
Complexity
LOW
Vector String
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:HWeaknesses
CWE-1321
Affected Products (CPE)
Adobe AcrobatAdobe Acrobat DcAdobe Acrobat Reader DcApple MacosMicrosoft Windows
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.