CVE-2026-48363 | Adobe ColdFusion up to 2023.20/2025.9 uncontrolled search path

A vulnerability was found in Adobe ColdFusion up to 2023.20/2025.9 and classified as critical. Affected by this vulnerability is an unknown functionality. Such manipulation leads to uncontrolled search path.

This vulnerability is listed as CVE-2026-48363. The attack must be carried out locally. There is no available exploit.