https://vulnerability.circl.lu/sightings/feed 2026-09-02T03:37:59.293392+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/9bd37b50-f719-4fe9-ba74-706cb4f86a72/export 2026-09-02T03:37:59.316456+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "9bd37b50-f719-4fe9-ba74-706cb4f86a72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48362", "type": "seen", "source": "https://t.me/CyberDispatch/2538", "content": "Adobe on Tuesday rolled out patches for over 50 vulnerabilities across its products, including critical-severity bugs in ColdFusion, Campaign Classic, and Commerce.\n\nWith a priority 1 rating, the ColdFusion update fixes 15 security defects, including three flagged as critical that could lead to arbitrary code execution and application denial-of-service (DoS).\n\nThese include an OS command injection tracked as CVE-2026-48362 (CVSS score of 10/10), an eval injection tracked as CVE-2026-48273 (CVSS score of 9.9/10), and an incorrect authorization tracked as CVE-2026-71384 (CVSS score of 9.6/10).", "creation_timestamp": "2026-08-30T00:00:38.375604Z"} 2026-08-30T00:00:38.375604+00:00 https://vulnerability.circl.lu/sighting/bcff94a9-c237-4160-80d2-e447f738c7e0/export 2026-09-02T03:37:59.318819+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "bcff94a9-c237-4160-80d2-e447f738c7e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48362", "type": "seen", "source": "https://t.me/CyberDispatch/2538", "content": "Adobe on Tuesday rolled out patches for over 50 vulnerabilities across its products, including critical-severity bugs in ColdFusion, Campaign Classic, and Commerce.\n\nWith a priority 1 rating, the ColdFusion update fixes 15 security defects, including three flagged as critical that could lead to arbitrary code execution and application denial-of-service (DoS).\n\nThese include an OS command injection tracked as CVE-2026-48362 (CVSS score of 10/10), an eval injection tracked as CVE-2026-48273 (CVSS score of 9.9/10), and an incorrect authorization tracked as CVE-2026-71384 (CVSS score of 9.6/10).", "creation_timestamp": "2026-08-29T20:00:05.614630Z"} 2026-08-29T20:00:05.614630+00:00 https://vulnerability.circl.lu/sighting/b3aa6b51-861b-4553-866f-7b816e6abd4b/export 2026-09-02T03:37:59.318981+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "b3aa6b51-861b-4553-866f-7b816e6abd4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48362", "type": "published-proof-of-concept", "source": "Telegram/SAqdp9bHH88ksxYx8tSwP5q461mBwCPpE6VU5oVsthx6anc", "content": "", "creation_timestamp": "2026-08-16T00:00:21.528689Z"} 2026-08-16T00:00:21.528689+00:00 https://vulnerability.circl.lu/sighting/a21e4a98-11d8-4db2-9cc5-08f5a94ad155/export 2026-09-02T03:37:59.319111+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "a21e4a98-11d8-4db2-9cc5-08f5a94ad155", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48362", "type": "seen", "source": "Telegram/SAqdp9bHH88ksxYx8tSwP5q461mBwCPpE6VU5oVsthx6anc", "content": "", "creation_timestamp": "2026-08-15T08:00:07.804862Z"} 2026-08-15T08:00:07.804862+00:00 https://vulnerability.circl.lu/sighting/919a7290-8c63-4398-a461-c1260b39d8b5/export 2026-09-02T03:37:59.319216+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "919a7290-8c63-4398-a461-c1260b39d8b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48362", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3msz35jdqeb2x", "content": "\ud83d\udccc CVE-2026-48362 - ColdFusion is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could resul... https://www.cyberhub.blog/cves/CVE-2026-48362", "creation_timestamp": "2026-08-14T02:07:06.879946Z"} 2026-08-14T02:07:06.879946+00:00 https://vulnerability.circl.lu/sighting/e29702fc-d54b-49ff-9075-4c139d4e7cdc/export 2026-09-02T03:37:59.319343+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "e29702fc-d54b-49ff-9075-4c139d4e7cdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48362", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3msxgtrqfkz2d", "content": "CVE-2026-48362 is trending. Hype score 3, currently #10 on cvemon.\n\nColdFusion is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbitrary code execution in\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-48362", "creation_timestamp": "2026-08-13T10:31:05.329735Z"} 2026-08-13T10:31:05.329735+00:00 https://vulnerability.circl.lu/sighting/1bf9cf11-4ffb-42c6-8a55-d8854ebcee88/export 2026-09-02T03:37:59.319485+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "1bf9cf11-4ffb-42c6-8a55-d8854ebcee88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48362", "type": "seen", "source": "https://thehackernews.com/2026/08/adobe-patches-three-cvss-100-coldfusion.html", "content": "Adobe has shipped updates to address multiple critical security vulnerabilities impacting ColdFusion, Commerce, and Campaign Classic that, if successfully exploited, could result in arbitrary code execution and privilege escalation.\n\nThe most severe of the flaws are listed below -\n\n\n CVE-2026-48362 (CVSS score: 10.0) - An operating system command injection vulnerability in ColdFusion that could", "creation_timestamp": "2026-08-13T01:00:35.445462Z"} 2026-08-13T01:00:35.445462+00:00 https://vulnerability.circl.lu/sighting/f0d5f206-dd02-45f9-85bc-bf930f85a27f/export 2026-09-02T03:37:59.319702+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "f0d5f206-dd02-45f9-85bc-bf930f85a27f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48362", "type": "seen", "source": "https://thehackernews.com/2026/08/adobe-patches-three-cvss-100-coldfusion.html", "content": "Adobe has shipped updates to address multiple critical security vulnerabilities impacting ColdFusion, Commerce, and Campaign Classic that, if successfully exploited, could result in arbitrary code execution and privilege escalation.\n\nThe most severe of the flaws are listed below -\n\n\n CVE-2026-48362 (CVSS score: 10.0) - An operating system command injection vulnerability in ColdFusion that could", "creation_timestamp": "2026-08-12T13:02:06.995434Z"} 2026-08-12T13:02:06.995434+00:00 https://vulnerability.circl.lu/sighting/1e76820b-d6a0-4ebc-b0ad-c5c8cb4ec8cb/export 2026-09-02T03:37:59.319819+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "1e76820b-d6a0-4ebc-b0ad-c5c8cb4ec8cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48362", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mstelly3tl2b", "content": "CVE-2026-48362 - coldfusion 2025\nAn attacker can run unauthorized code on your ColdFusion server without needing user interaction, potentially causing damage or disruption. This vulnerability affects\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#coldfusion2025 #adobe #CVE #infosec", "creation_timestamp": "2026-08-11T19:40:04.277830Z"} 2026-08-11T19:40:04.277830+00:00