CVE-2026-48376: adobe coldfusion Improper Encoding or Escaping of Output

Vulnerability summary

CVE-2026-48376 is a medium (CVSS 5.4) Improper Encoding or Escaping of Output vulnerability in adobe coldfusion. EPSS estimates a 0.68% chance of exploitation in the next 30 days, higher than 51.7% of scored vulnerabilities.

Timeline

1. 11-08-2026
   PublishedVulnerability first disclosed.
2. 27-08-2026
   Last modifiedVulnerability information updated.

Description

is affected by an Improper Encoding or Escaping of Output vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized write access, causing a limited disruption to availability. Exploitation of this issue does not require user interaction.

• CWE-116Improper Encoding or Escaping of OutputThe product prepares a structured message for communication with another component, but encoding or escaping of the data is either missing or done incorrectly. As a result, the intended structure of the message is not preserved.