CVE-2026-48386: adobe coldfusion

Vulnerability summary

CVE-2026-48386 is a high (CVSS 7.5) vulnerability in adobe coldfusion. EPSS estimates a 0.96% chance of exploitation in the next 30 days, higher than 61.1% of scored vulnerabilities.

Timeline

1. 11-08-2026
   PublishedVulnerability first disclosed.
2. 27-08-2026
   Last modifiedVulnerability information updated.

Description

ColdFusion is affected by a Use of a Broken or Risky Cryptographic Algorithm vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue does not require user interaction.

• CWE-327Use of a Broken or Risky Cryptographic AlgorithmThe product uses a broken or risky cryptographic algorithm or protocol.