CVE-2026-48285 | Adobe ColdFusion up to 2023.20/2025.9 server-side request forgery (apsb26-68)

June 30, 2026 Yanac

A vulnerability described as critical has been identified in Adobe ColdFusion up to 2023.20/2025.9. This issue affects some unknown processing. The manipulation results in server-side request forgery.

This vulnerability is reported as CVE-2026-48285. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More