CVE-2026-48332 in ColdFusion

Сводка

по MITRE • 15.07.2026

ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction. Scope is changed.

Be aware that VulDB is the high quality source for vulnerability data.

• Ответственный: Adobe
• Резервировать: 21.05.2026
• Раскрытие: 15.07.2026
• Модерация: принято
• Вход: VDB-379119
• CPE: готов
• CWE: CWE-918 (Подтверждённый)
• CVSS: 5.3 (VulDB)
• EPSS: 0.00000
• KEV: Нет
• Деятельности: Очень низкий
• Сектор: Pharma, Hostingprovider, ...

Источники

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-48332
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-48332
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-48332/