{"metadata": {"vulnerability": "CVE-2026-48316", "count": 38, "kinds": {"milestone": 8, "sighting": 8, "kev": 0, "other": 22}}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0217", "record": "NCSC-2026-0217", "field": "document.tracking.generator.date"}, {"timestamp": "2026-05-21T15:28:38.137Z", "date_only": false, "value": "2026-05-21T15:28:38.137Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-48316", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-06-30T00:00:00Z", "date_only": true, "value": "2026-06-30", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0821", "record": "CERTFR-2026-AVI-0821", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-06-30T17:00:00Z", "date_only": false, "value": "2026-06-30T17:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / adobe", "record": "CVE-2026-48316", "field": "containers.cna.datePublic"}, {"timestamp": "2026-06-30T22:00:00Z", "date_only": false, "value": "2026-06-30T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-2155", "record": "WID-SEC-W-2026-2155", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-06-30T22:00:00Z", "date_only": false, "value": "2026-06-30T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-2155", "record": "WID-SEC-W-2026-2155", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-06-30T22:00:00Z", "date_only": false, "value": "2026-06-30T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-2155", "record": "WID-SEC-W-2026-2155", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-07-01T00:00:00Z", "date_only": false, "value": "2026-07-01T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0821", "record": "CERTFR-2026-AVI-0821", "field": "last_revision_date"}, {"timestamp": "2026-07-01T00:00:00Z", "date_only": false, "value": "2026-07-01T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0821", "record": "CERTFR-2026-AVI-0821", "field": "initial_release_date"}, {"timestamp": "2026-07-01T00:00:00Z", "date_only": false, "value": "2026-07-01T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0821", "record": "CERTFR-2026-AVI-0821", "field": "revisions.0.revision_date"}, {"timestamp": "2026-07-01T08:52:48.391Z", "date_only": false, "value": "2026-07-01T08:52:48.391910Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0217", "record": "NCSC-2026-0217", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-07-01T08:52:48.391Z", "date_only": false, "value": "2026-07-01T08:52:48.391910Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0217", "record": "NCSC-2026-0217", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-07-01T08:52:48.391Z", "date_only": false, "value": "2026-07-01T08:52:48.391910Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0217", "record": "NCSC-2026-0217", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-07-01T09:45:11.706Z", "date_only": false, "value": "2026-07-01T09:45:11.706863Z", "kind": "sighting", "label": "Seen", "source": "https://www.cert.dk/news/2026-07-01/Kritiske-ColdFusion-saarbarheder-aabner-for-fuld-serverovertagelse", "record": "CVE-2026-48316", "field": "creation_timestamp", "uuid": "4fcbaf55-23cf-4202-8a88-cf2fa7c80046", "url": "https://www.cert.dk/news/2026-07-01/Kritiske-ColdFusion-saarbarheder-aabner-for-fuld-serverovertagelse"}, {"timestamp": "2026-07-01T13:00:13.466Z", "date_only": false, "value": "2026-07-01T13:00:13.466382Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mpll4ubpnt2q", "record": "CVE-2026-48316", "field": "creation_timestamp", "uuid": "145bb8b9-d2ab-4505-88ce-cf3fab0c0496", "content": "\ud83d\udd17 CVE : CVE-2026-48276, CVE-2026-48277, CVE-2026-48281, CVE-2026-48282, CVE-2026-48283, CVE-2026-48285, CVE-2026-48307, CVE-2026-48313, CVE-2026-48314, CVE-2026-48315, CVE-2026-48316", "url": "https://bsky.app/profile/o2cloud.bsky.social/post/3mpll4ubpnt2q"}, {"timestamp": "2026-07-02T22:00:00Z", "date_only": false, "value": "2026-07-02T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-2155", "record": "WID-SEC-W-2026-2155", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-07-03T04:01:06.053Z", "date_only": false, "value": "2026-07-03T04:01:06.053131Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://labs.watchtowr.com/its-37oc-and-all-we-can-think-about-is-coldfusion-adobe-coldfusion-security-bulletin-apsb26-68-cve-bonanza", "record": "CVE-2026-48316", "field": "creation_timestamp", "uuid": "5355c27f-ad81-4370-b202-0465f06ae31b", "url": "https://labs.watchtowr.com/its-37oc-and-all-we-can-think-about-is-coldfusion-adobe-coldfusion-security-bulletin-apsb26-68-cve-bonanza"}, {"timestamp": "2026-07-06T00:00:00Z", "date_only": true, "value": "2026-07-06", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2026-26850", "record": "CNVD-2026-26850", "field": "submitTime"}, {"timestamp": "2026-07-06T16:13:57.475Z", "date_only": false, "value": "2026-07-06T16:13:57.475Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-48316", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-07-06T17:16:32Z", "date_only": false, "value": "2026-07-06T17:16:32Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-7PPX-3G3P-7823", "record": "GHSA-7PPX-3G3P-7823", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-07-06T17:16:32.010Z", "date_only": false, "value": "2026-07-06T17:16:32.010", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-48316", "record": "FKIE_CVE-2026-48316", "field": "published"}, {"timestamp": "2026-07-06T17:32:04.208Z", "date_only": false, "value": "2026-07-06T17:32:04.208961Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mpymnkz2v22j", "record": "CVE-2026-48316", "field": "creation_timestamp", "uuid": "06e8916b-4407-4255-af96-3fc0d4d74d16", "content": "CVE-2026-48316\nColdFusion versions 2025.9 and earlier are affected by a security issue that could allow an attacker to execute code with the privileges of the current user. This means an attacker could potentially access\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mpymnkz2v22j"}, {"timestamp": "2026-07-06T18:31:16Z", "date_only": false, "value": "2026-07-06T18:31:16Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-7PPX-3G3P-7823", "record": "GHSA-7PPX-3G3P-7823", "field": "published"}, {"timestamp": "2026-07-06T18:31:16Z", "date_only": false, "value": "2026-07-06T18:31:16Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-7PPX-3G3P-7823", "record": "GHSA-7PPX-3G3P-7823", "field": "modified"}, {"timestamp": "2026-07-06T22:00:00Z", "date_only": false, "value": "2026-07-06T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-2155", "record": "WID-SEC-W-2026-2155", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-07-06T22:00:00Z", "date_only": false, "value": "2026-07-06T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-2155", "record": "WID-SEC-W-2026-2155", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-07-07T03:56:40.241Z", "date_only": false, "value": "2026-07-07T03:56:40.241331Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-48316", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-07-07T03:56:40.241Z", "date_only": false, "value": "2026-07-07T03:56:40.241331Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-48316", "record": "FKIE_CVE-2026-48316", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-07-07T07:51:42.896Z", "date_only": false, "value": "2026-07-07T07:51:42.896+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-2155", "record": "WID-SEC-W-2026-2155", "field": "document.tracking.generator.date"}, {"timestamp": "2026-07-07T12:02:19.386Z", "date_only": false, "value": "2026-07-07T12:02:19.386478Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mq2kou357a27", "record": "CVE-2026-48316", "field": "creation_timestamp", "uuid": "44829175-604c-44aa-abe5-f9e3c5eb256a", "content": "CVE-2026-48316 - CRITICAL: Unauthenticated RCE in ColdFusion. CVSS 10.0. No patch available. Immediate mitigation required. #CVE #ColdFusion #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-48316/", "url": "https://bsky.app/profile/hugovalters.bsky.social/post/3mq2kou357a27"}, {"timestamp": "2026-07-07T13:10:00.267Z", "date_only": false, "value": "2026-07-07T13:10:00.267Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-48316", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-08T08:45:25.722Z", "date_only": false, "value": "2026-07-08T08:45:25.722388Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/adobe-aggiornamenti-di-sicurezza-17", "record": "CVE-2026-48316", "field": "creation_timestamp", "uuid": "2355b581-5f35-4ba3-a5ab-453ad12a80d4", "url": "https://www.acn.gov.it/portale/w/adobe-aggiornamenti-di-sicurezza-17"}, {"timestamp": "2026-07-09T00:00:00Z", "date_only": true, "value": "2026-07-09", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2026-26850", "record": "CNVD-2026-26850", "field": "openTime"}, {"timestamp": "2026-07-10T02:07:07.216Z", "date_only": false, "value": "2026-07-10T02:07:07.216005Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqb2tcjfsr26", "record": "CVE-2026-48316", "field": "creation_timestamp", "uuid": "37c15291-a6fe-4a9f-8df9-03f4ecc28f94", "content": "\ud83d\udccc CVE-2026-48316 - ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code executi... https://www.cyberhub.blog/cves/CVE-2026-48316", "url": "https://bsky.app/profile/cyberhub.blog/post/3mqb2tcjfsr26"}, {"timestamp": "2026-07-28T22:43:35.980Z", "date_only": false, "value": "2026-07-28T22:43:35.980419Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mrqictkgjc2q", "record": "CVE-2026-48316", "field": "creation_timestamp", "uuid": "5e9a7897-bc8f-43ce-b6ef-0a6e8d2c0ec6", "content": "\u300cAdobe ColdFusion\u300d\u306b\u8907\u6570\u306e\u6df1\u523b\u306a\u8106\u5f31\u6027 - \u65e9\u6025\u306b\u5bfe\u5fdc\u3092\n\nAdobe\u306f\u3001\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u30b5\u30fc\u30d0\u300cAdobe ColdFusion\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\u304c\u5224\u660e\u3057\u305f\u3068\u3057\u3066\u3001\u5b9a\u4f8b\u5916\u306e\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u516c\u958b\u3057\u305f\u3002\u60aa\u7528\u3055\u308c\u308b\u30ea\u30b9\u30af\u304c\u9ad8\u3044\u3068\u3057\u3001\u3067\u304d\u308b\u3060\u3051\u65e9\u6025\u306b\u5bfe\u51e6\u3059\u308b\u3088\u3046\u6c42\u3081\u3066\u3044\u308b\u3002\n\n...\n\n\u306a\u304b\u3067\u3082\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u306b\u3064\u306a\u304c\u308b6\u4ef6\u300cCVE-2026-48276\u300d\u300cCVE-2026-48277\u300d\u300cCVE-2026-48281\u300d\u300cCVE-2026-48282\u300d\u300cCVE-2026-48283\u300d\u300cCVE-2026-48316\u300d\u306b\u3064\u3044\u3066\u306f\u3001\u5171\u901a\u8106\u5f31\u6027\u8a55\u4fa1\u30b7\u30b9\u30c6\u30e0\u300cCVSSv3.1\u300d\u306e\u30d9\u30fc\u30b9\u30b9\u30b3\u30a2...", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mrqictkgjc2q"}, {"timestamp": "2026-08-27T22:33:00.105Z", "date_only": false, "value": "2026-08-27T22:33:00.105Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-48316", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-27T22:33:00.105Z", "date_only": false, "value": "2026-08-27T22:33:00.105Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / adobe", "record": "CVE-2026-48316", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-28T00:17:47.450Z", "date_only": false, "value": "2026-08-28T00:17:47.450", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-48316", "record": "FKIE_CVE-2026-48316", "field": "lastModified"}]}