Exploit / PoCcriticalExploited in the wild

Adobe ColdFusion flaw CVE-2026-48282 now exploited in the wild

Security Affairsby @securityaffairsJul 6, 2026 · 19:53 UTC (Jul 6, 2026)1 min read5 · 3 reads

Read at securityaffairs.com

Analyze CVE-2026-48282 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2026-48282 CVE-2017-3066

Tags: cve-2017-3066 cve-2026-48282 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2017-3066	Unauthenticated Deserialization RCE in Adobe ColdFusion (BlazeDS)	9.8	91%	KEVPoC	Apr 27, 2017 KEV Feb 24, 2025
CVE-2026-48282	Path Traversal Leading to RCE in Adobe ColdFusion	10.0	42%	KEV	Jun 30, 2026 KEV Jul 7, 2026

From the original article

1 min read at securityaffairs.com

Attackers are exploiting the critical Adobe ColdFusion flaw CVE-2026-48282, which allows remote code execution on unpatched servers. Attackers have started exploiting CVE-2026-48282 , a maximum-severity vulnerability in Adobe ColdFusion. The flaw is a path traversal issue that could result in arbitrary code execution without authentication.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.