VDB
CVE-2026-48285
CVE-2026-48285
PUBLISHED
CVSS 8.6 HIGH
Reported by adobe · Published June 30, 2026
ColdFusion versions 2025.9, 2023.20 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction. Scope is changed.
Risk Scores
CVSS 3.1
8.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Adobe | ColdFusion | 0 |
| Adobe | ColdFusion | 0 |
Timeline
- Jun 30, 2026 CVE Published
- Jun 30, 2026 CVE Updated
- Jul 1, 2026 EPSS Score
- Jul 1, 2026 Coalition ESS Score