Adobe has urged ColdFusion customers to patch their instances immediately after at least one maximum severity flaw was reported as being exploited by attackers.
The software giant released patches for 11 CVEs on June 30 in the APSB26-68 bulletin. Six of these were given a CVSS score of 10.
Security researchers flagged that CVE-2026-48282 was being targeted within hours of the vulnerability being made public.
It’s a path traversal flaw in the popular web app development platform which could lead to arbitrary code execution.
Read more on Adobe flaws: New Vulnerabilities Found in Adobe ColdFusion
There are 775 exposed ColdFusion instances online, according to data from the ShadowServer Foundation.
CVE-2026-48282, and the other vulnerabilities listed in APSB26-68 were not in…
Source link
![Adobe ColdFusion Zero-Day: CVSS 10.0, 2-Hour Exploit [2026]](https://tech-insider.org/wp-content/uploads/2026/07/adobe-coldfusion-zero-day-2026-1.webp "Adobe ColdFusion Zero-Day: CVSS 10.0, 2-Hour Exploit [2026]")