{"metadata": {"vulnerability": "CVE-2026-90530", "count": 24, "kinds": {"milestone": 7, "sighting": 3, "kev": 0, "other": 14}}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0435", "record": "NCSC-2026-0435", "field": "document.tracking.generator.date"}, {"timestamp": "2026-09-12T11:06:59.201Z", "date_only": false, "value": "2026-09-12T11:06:59.201Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-90530", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": true, "value": "2026-10-13", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1301", "record": "CERTFR-2026-AVI-1301", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-10-13T17:00:00Z", "date_only": false, "value": "2026-10-13T17:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / adobe", "record": "CVE-2026-90530", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-13T20:21:35.953Z", "date_only": false, "value": "2026-10-13T20:21:35.953Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-90530", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-13T20:35:47.326Z", "date_only": false, "value": "2026-10-13T20:35:47.326Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / adobe", "record": "CVE-2026-90530", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T21:19:57Z", "date_only": false, "value": "2026-10-13T21:19:57Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-R8V2-JG8H-RG32", "record": "GHSA-R8V2-JG8H-RG32", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-13T21:19:57.273Z", "date_only": false, "value": "2026-10-13T21:19:57.273", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-90530", "record": "FKIE_CVE-2026-90530", "field": "published"}, {"timestamp": "2026-10-13T21:37:33Z", "date_only": false, "value": "2026-10-13T21:37:33Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-R8V2-JG8H-RG32", "record": "GHSA-R8V2-JG8H-RG32", "field": "published"}, {"timestamp": "2026-10-13T21:37:33Z", "date_only": false, "value": "2026-10-13T21:37:33Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-R8V2-JG8H-RG32", "record": "GHSA-R8V2-JG8H-RG32", "field": "modified"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1301", "record": "CERTFR-2026-AVI-1301", "field": "last_revision_date"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1301", "record": "CERTFR-2026-AVI-1301", "field": "initial_release_date"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1301", "record": "CERTFR-2026-AVI-1301", "field": "revisions.0.revision_date"}, {"timestamp": "2026-10-14T02:09:12.486Z", "date_only": false, "value": "2026-10-14T02:09:12.486265Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxshpglj2n2l", "record": "CVE-2026-90530", "field": "creation_timestamp", "uuid": "3155b9fc-4b68-4f41-9dc1-1ea3ee722632", "content": "\ud83d\udea8 CVE-2026-90530 \u2014 CVSS 9.3 CRITICAL\n\nColdFusion RDS is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Travers...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-90530\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxshpglj2n2l"}, {"timestamp": "2026-10-14T07:20:05.775Z", "date_only": false, "value": "2026-10-14T07:20:05.775482Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxsz3dmjc32x", "record": "CVE-2026-90530", "field": "creation_timestamp", "uuid": "82a3314f-8d65-41ac-a1b9-45ede0dd85f8", "content": "CVE-2026-90530 - coldfusion 2025\nAdobe ColdFusion 2025 and 2023 include a Remote Development Service (RDS) that can be tricked into reading files outside its allowed folder. This could let an attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#coldfusion2025 #adobe #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxsz3dmjc32x"}, {"timestamp": "2026-10-14T14:15:22.718Z", "date_only": false, "value": "2026-10-14T14:15:22.718454Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-90530", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-14T14:15:22.718Z", "date_only": false, "value": "2026-10-14T14:15:22.718454Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-90530", "record": "FKIE_CVE-2026-90530", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-14T14:24:19.927Z", "date_only": false, "value": "2026-10-14T14:24:19.927068Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117439716350497638", "record": "CVE-2026-90530", "field": "creation_timestamp", "uuid": "4c765cdb-9bf0-4ba3-a555-0254ea66791b", "content": "CVE-2026-90530 ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) ColdFusion RDS is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction. Scope is changed.\nRDS is purely a development feature meant for debugging purposes, and switching ColdFusion to Production Secure Profile automatically disables RDS. The Lockdown Guide outlines the specific step to disable RDS if a ColdFusion server is not being used in Production Secure Profile.\nhttps://www.cve.org/CVERecord?id=CVE-2026-90530https://www.adobe.com/trust/security/products/coldfusion/apsb26-144.htmlhttps://guides.adobe.com/coldfusion/en/docs/install-and-configure-coldfusion/installing-the-server-configuration.htmlhttps://guides.adobe.com/coldfusion/en/docs/coldfusion-tools/security-remote-development-services-rds.htmlhttps://helpx.adobe.com/coldfusion/configuring-administering/administering-coldfusion-security.htmlhttps://www.adobe.com/cc-shared/assets/pdf/products/coldfusion-family/coldfusion-2025-lockdown-guide-1-1.pdfhttps://www.stigviewer.com/stigs/adobe_coldfusion/2026-05-13/finding/V-279042#Adobe #ColdFusion2025 #ColdFusion2023#CVE_2026_90530#bot", "url": "https://infosec.exchange/users/cve/statuses/117439716350497638"}, {"timestamp": "2026-10-14T14:53:07.419Z", "date_only": false, "value": "2026-10-14T14:53:07.419Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-90530", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-14T14:53:07.419Z", "date_only": false, "value": "2026-10-14T14:53:07.419Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-90530", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T15:50:50.180Z", "date_only": false, "value": "2026-10-14T15:50:50.180", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-90530", "record": "FKIE_CVE-2026-90530", "field": "lastModified"}, {"timestamp": "2026-10-16T06:30:43.718Z", "date_only": false, "value": "2026-10-16T06:30:43.718374Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0435", "record": "NCSC-2026-0435", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-16T06:30:43.718Z", "date_only": false, "value": "2026-10-16T06:30:43.718374Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0435", "record": "NCSC-2026-0435", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-16T06:30:43.718Z", "date_only": false, "value": "2026-10-16T06:30:43.718374Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0435", "record": "NCSC-2026-0435", "field": "document.tracking.current_release_date"}]}