CVE-2026-48282 | Adobe ColdFusion up to 2023.20/2025.9 path traversal (apsb26-68)

A vulnerability was found in Adobe ColdFusion up to 2023.20/2025.9. It has been classified as critical. Affected by this vulnerability is an unknown functionality. This manipulation causes path traversal.

The identification of this vulnerability is CVE-2026-48282. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is recommended.