{"metadata": {"vulnerability": "CVE-2026-48281", "count": 35, "kinds": {"milestone": 8, "sighting": 5, "kev": 0, "other": 22}}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0217", "record": "NCSC-2026-0217", "field": "document.tracking.generator.date"}, {"timestamp": "2026-05-21T15:28:38.133Z", "date_only": false, "value": "2026-05-21T15:28:38.133Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-48281", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-06-30T00:00:00Z", "date_only": true, "value": "2026-06-30", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0821", "record": "CERTFR-2026-AVI-0821", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-06-30T00:00:00Z", "date_only": false, "value": "2026-06-30T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-48281", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-06-30T00:00:00Z", "date_only": false, "value": "2026-06-30T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-48281", "record": "FKIE_CVE-2026-48281", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-06-30T15:12:02.483Z", "date_only": false, "value": "2026-06-30T15:12:02.483Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-48281", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-06-30T16:16:54Z", "date_only": false, "value": "2026-06-30T16:16:54Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-39JM-G7JR-7W2J", "record": "GHSA-39JM-G7JR-7W2J", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-06-30T16:16:54.427Z", "date_only": false, "value": "2026-06-30T16:16:54.427", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-48281", "record": "FKIE_CVE-2026-48281", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-06-30T17:00:00Z", "date_only": false, "value": "2026-06-30T17:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / adobe", "record": "CVE-2026-48281", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-06-30T18:31:36Z", "date_only": false, "value": "2026-06-30T18:31:36Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-39JM-G7JR-7W2J", "record": "GHSA-39JM-G7JR-7W2J", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-06-30T18:31:36Z", "date_only": false, "value": "2026-06-30T18:31:36Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-39JM-G7JR-7W2J", "record": "GHSA-39JM-G7JR-7W2J", "field": "modified"}, {"timestamp": "2026-06-30T22:00:00Z", "date_only": false, "value": "2026-06-30T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-2155", "record": "WID-SEC-W-2026-2155", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-06-30T22:00:00Z", "date_only": false, "value": "2026-06-30T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-2155", "record": "WID-SEC-W-2026-2155", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-06-30T22:00:00Z", "date_only": false, "value": "2026-06-30T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-2155", "record": "WID-SEC-W-2026-2155", "field": "vulnerabilities.2.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-01T00:00:00Z", "date_only": false, "value": "2026-07-01T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0821", "record": "CERTFR-2026-AVI-0821", "field": "last_revision_date"}, {"timestamp": "2026-07-01T00:00:00Z", "date_only": false, "value": "2026-07-01T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0821", "record": "CERTFR-2026-AVI-0821", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-01T00:00:00Z", "date_only": false, "value": "2026-07-01T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0821", "record": "CERTFR-2026-AVI-0821", "field": "revisions.0.revision_date"}, {"timestamp": "2026-07-01T03:07:07.363Z", "date_only": false, "value": "2026-07-01T03:07:07.363875Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpkjycun2h2g", "record": "CVE-2026-48281", "field": "creation_timestamp", "uuid": "918b5885-7475-4e96-9266-d179960fd1b8", "content": "\ud83d\udccc CVE-2026-48281 - ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code executi... https://www.cyberhub.blog/cves/CVE-2026-48281", "url": "https://bsky.app/profile/cyberhub.blog/post/3mpkjycun2h2g"}, {"timestamp": "2026-07-01T03:55:53.452Z", "date_only": false, "value": "2026-07-01T03:55:53.452Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-48281", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-01T08:52:48.391Z", "date_only": false, "value": "2026-07-01T08:52:48.391910Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0217", "record": "NCSC-2026-0217", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-07-01T08:52:48.391Z", "date_only": false, "value": "2026-07-01T08:52:48.391910Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0217", "record": "NCSC-2026-0217", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-07-01T08:52:48.391Z", "date_only": false, "value": "2026-07-01T08:52:48.391910Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0217", "record": "NCSC-2026-0217", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-07-01T09:45:09.540Z", "date_only": false, "value": "2026-07-01T09:45:09.540865Z", "kind": "sighting", "label": "Seen", "source": "https://www.cert.dk/news/2026-07-01/Kritiske-ColdFusion-saarbarheder-aabner-for-fuld-serverovertagelse", "record": "CVE-2026-48281", "field": "creation_timestamp", "uuid": "fab996c0-2ea4-42e5-998b-9032bd932e7a", "url": "https://www.cert.dk/news/2026-07-01/Kritiske-ColdFusion-saarbarheder-aabner-for-fuld-serverovertagelse"}, {"timestamp": "2026-07-01T13:00:13.126Z", "date_only": false, "value": "2026-07-01T13:00:13.126962Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mpll4ubpnt2q", "record": "CVE-2026-48281", "field": "creation_timestamp", "uuid": "52ea4a32-fe47-4d12-a463-4a65acfae679", "content": "\ud83d\udd17 CVE : CVE-2026-48276, CVE-2026-48277, CVE-2026-48281, CVE-2026-48282, CVE-2026-48283, CVE-2026-48285, CVE-2026-48307, CVE-2026-48313, CVE-2026-48314, CVE-2026-48315, CVE-2026-48316", "url": "https://bsky.app/profile/o2cloud.bsky.social/post/3mpll4ubpnt2q"}, {"timestamp": "2026-07-02T22:00:00Z", "date_only": false, "value": "2026-07-02T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-2155", "record": "WID-SEC-W-2026-2155", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-07-06T22:00:00Z", "date_only": false, "value": "2026-07-06T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-2155", "record": "WID-SEC-W-2026-2155", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-07-06T22:00:00Z", "date_only": false, "value": "2026-07-06T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-2155", "record": "WID-SEC-W-2026-2155", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-07-07T07:51:42.896Z", "date_only": false, "value": "2026-07-07T07:51:42.896+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-2155", "record": "WID-SEC-W-2026-2155", "field": "document.tracking.generator.date"}, {"timestamp": "2026-07-08T00:00:00Z", "date_only": true, "value": "2026-07-08", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2026-27439", "record": "CNVD-2026-27439", "field": "submitTime"}, {"timestamp": "2026-07-08T08:45:08.242Z", "date_only": false, "value": "2026-07-08T08:45:08.242842Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/adobe-aggiornamenti-di-sicurezza-17", "record": "CVE-2026-48281", "field": "creation_timestamp", "uuid": "38c256e9-842e-4351-9c43-62ced49afac9", "url": "https://www.acn.gov.it/portale/w/adobe-aggiornamenti-di-sicurezza-17"}, {"timestamp": "2026-07-14T00:00:00Z", "date_only": true, "value": "2026-07-14", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2026-27439", "record": "CNVD-2026-27439", "field": "openTime"}, {"timestamp": "2026-07-28T22:43:35.835Z", "date_only": false, "value": "2026-07-28T22:43:35.835531Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mrqictkgjc2q", "record": "CVE-2026-48281", "field": "creation_timestamp", "uuid": "9a9fd2a4-c93d-4de1-af2a-4630dfe02d72", "content": "\u300cAdobe ColdFusion\u300d\u306b\u8907\u6570\u306e\u6df1\u523b\u306a\u8106\u5f31\u6027 - \u65e9\u6025\u306b\u5bfe\u5fdc\u3092\n\nAdobe\u306f\u3001\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u30b5\u30fc\u30d0\u300cAdobe ColdFusion\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\u304c\u5224\u660e\u3057\u305f\u3068\u3057\u3066\u3001\u5b9a\u4f8b\u5916\u306e\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u516c\u958b\u3057\u305f\u3002\u60aa\u7528\u3055\u308c\u308b\u30ea\u30b9\u30af\u304c\u9ad8\u3044\u3068\u3057\u3001\u3067\u304d\u308b\u3060\u3051\u65e9\u6025\u306b\u5bfe\u51e6\u3059\u308b\u3088\u3046\u6c42\u3081\u3066\u3044\u308b\u3002\n\n...\n\n\u306a\u304b\u3067\u3082\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u306b\u3064\u306a\u304c\u308b6\u4ef6\u300cCVE-2026-48276\u300d\u300cCVE-2026-48277\u300d\u300cCVE-2026-48281\u300d\u300cCVE-2026-48282\u300d\u300cCVE-2026-48283\u300d\u300cCVE-2026-48316\u300d\u306b\u3064\u3044\u3066\u306f\u3001\u5171\u901a\u8106\u5f31\u6027\u8a55\u4fa1\u30b7\u30b9\u30c6\u30e0\u300cCVSSv3.1\u300d\u306e\u30d9\u30fc\u30b9\u30b9\u30b3\u30a2...", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mrqictkgjc2q"}, {"timestamp": "2026-08-27T22:32:53.287Z", "date_only": false, "value": "2026-08-27T22:32:53.287Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-48281", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-27T22:32:53.287Z", "date_only": false, "value": "2026-08-27T22:32:53.287Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / adobe", "record": "CVE-2026-48281", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-25T21:10:00.770Z", "date_only": false, "value": "2026-10-25T21:10:00.770", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-48281", "record": "FKIE_CVE-2026-48281", "field": "lastModified"}], "metrics": {"as_of": "2026-10-28T20:52:13.672Z", "anchors": {"origin": {"timestamp": "2026-06-30T15:12:02.483Z", "date_only": false, "value": "2026-06-30T15:12:02.483Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-48281", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-06-30T15:12:02.483Z", "date_only": false, "value": "2026-06-30T15:12:02.483Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-48281", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 10388411.189493, "hours": 2885.669774859167, "days": 120.23624061913195, "min_seconds": 10388411.189493, "max_seconds": 10388411.189493, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-06-30T15:12:02.483Z", "date_only": false, "value": "2026-06-30T15:12:02.483Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-48281", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-28T20:52:13.672Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}