Adobe ColdFusion users need to patch their installs. An issue that was addressed last week has been exploited in the wild.
When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works.
CVE-2026-48282, a patched exploit in Adobe ColdFusion, is now being exploited in the wild, so it's a good idea to apply the available patch soon.
Paul Hill
Neowin
@ziks_99 ·
Critical Adobe ColdFusion Vulnerability Exploited in Attacks
Max severity Adobe ColdFusion flaw now exploited in attacks
Max-Severity Adobe ColdFusion RCE (CVE-2026-48282) Is Now Under Active Attack
Adobe ColdFusion: scoperto grave exploit già sfruttato dagli hacker
Lücken in Adobe ColdFusion und Campaign Classic: Patchdayzyklus verdoppelt
Hackers are exploiting a critical vulnerability (CVE-2026-48282) in Adobe ColdFusion that carries a CVSS score of 10/10.
Attackers are now exploiting a maximum-severity Adobe ColdFusion vulnerability tracked as CVE-2026-48282, the Canadian Center for…
TL;DR what: Adobe ColdFusion's maximum-severity flaw CVE-2026-48282 is being actively...
ColdFusion 2023 Update 21, 2025 Update 10, and ACC v7 build 9397 fix code execution bugs; no exploits reported.
Adobe issued June 2026 security updates for ColdFusion and Campaign Classic to resolve half a dozen maximum severity…
Adobe has released security patches for seven maximum-severity vulnerabilities in the ColdFusion web app development platform and…
