Adobe fixed multiple maximum-severity flaws in ColdFusion and Campaign Classic
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-48282 | Path Traversal Leading to RCE in Adobe ColdFusion | 10.0 group max | 42% | KEV | KEV |
| CVE-2026-48286 | Adobe Campaign Classic (ACC) versions 7.4.3 build 9396 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code… | 10.0 | 1% | ||
| CVE-2026-48316 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the… | 10.0 | 1% |
From the original article
1 min read at securityaffairs.com
Adobe fixed multiple critical flaws, including max severity bugs in ColdFusion and Campaign Classic that could lead to remote code execution Adobe has released security updates for ColdFusion and Campaign Classic , fixing multiple critical vulnerabilities, including seven maximum-severity issues (CVSS score of 10. 0).
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.