CVE-2026-48283

Name: CVE-2026-48283 — Vulnerability Record
Brand: Quanteta Data Lab
SKU: CVE-2026-48283

CRITICAL

CVSS v3.1: 10.0

NetworkNo privilegesNo user interactionUnrestricted UploadVendor advisory ref

Source data as of: 2026-07-01 05:03:33 UTC

At a glance

Severity: CRITICAL
CVSS: 10.0 v3.1 · NVD
EPSS: EPSS not provided by FIRST.org for this CVE
CISA KEV: No
Type: Unrestricted Upload · NVD CWE
Attack conditions (CVSS vector): NetworkNo privilegesNo user interaction · Source: NVD Vector
Affected vendors: adobe
Published: 2026-06-30 · Modified: 2026-06-30
References: Jump to references (1)

CVSS / EPSS / KEV

CVSS v3.1 10.0 / 10 CRITICAL Source: NVD

EPSS — EPSS not provided by FIRST.org for this CVE Source: FIRST.org

CISA KEV No Source: CISA

Source — CVSS: NVD · EPSS: FIRST.org · KEV: CISA. Data & Sources

Description

ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed.

Record details

CVE ID: CVE-2026-48283
CVSS (v3.1): 10.0 (CRITICAL)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Exploitability subscore: 3.9
Impact subscore: 6.0
CISA KEV: No
Weakness (CWE): CWE-434
Affected vendors: adobe
Affected configurations (CPE): 31
Published: 2026-06-30
Modified: 2026-06-30
Status: Analyzed

References

Reference URLs as listed by NVD, grouped by a mechanical match on the link's host/pattern. Labels describe the link type only.

Vendor advisory https://helpx.adobe.com/security/products/coldfusion/apsb26-68.html

← Back to all records

CVE-2026-48283

At a glance

CVSS / EPSS / KEV

Description

Record details

References

Related records

Same affected vendor

Same weakness type (CWE)

Published the same year