CVE-2026-48324 in ColdFusioninformación

Resumen

por MITRE • 2026-07-15

ColdFusion is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsable

Adobe

Reservar

2026-05-21

Divulgación

2026-07-15

Moderación

aceptado

Artículo

VDB-379063

CPE

listo

EPSS

0.00000

KEV

no

Actividades

bajo

Sector

Education, Telecommunication, ...

Fuentes

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-48324
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-48324
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-48324/

◂ AnteriorVisión De ConjuntoPróximo ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!