Executive Summary
Resecurity is tracking the exploitation of CVE-2026-48282, a critical path traversal vulnerability in Adobe ColdFusion affecting the Remote Development Services (RDS) FILEIO handler. The vulnerability allows an unauthenticated attacker to write arbitrary files anywhere on the server’s file system, including the web root, resulting in unauthenticated Remote Code Execution (RCE).
Adobe assigned this vulnerability a CVSS v3.1 score of 10.0 (Critical), reflecting both its severe impact and the simplicity of exploitation. Due to active real-world exploitation, CISA has officially added this flaw to its Known Exploited Vulnerabilities Catalog.
Because exploitation requires neither authentication nor user interaction, any Internet-accessible…
Source link
