{"vulnerability": "CVE-2026-4831", "sightings": [{"uuid": "11acfd1b-4f1e-42a1-9a78-7a5f7185b055", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4831", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhwn566a4e2z", "content": "", "creation_timestamp": "2026-03-26T03:13:55.262674Z"}, {"uuid": "fbee51e6-b04b-42f8-b032-aeed69d7fc80", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48313", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/965243f3-0595-449c-b576-93d84bd2262e", "content": "", "creation_timestamp": "2026-08-04T11:00:26.496406Z"}, {"uuid": "9b386e75-95ad-46b2-98af-a4632c374665", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48317", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms7lzx7udf2f", "content": "CVE-2026-48317 - adobe campaign classic\nAdobe Campaign Classic has a security flaw that could allow an attacker with limited privileges to run unauthorized code on the system. This could happen if an attacker sends\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#adobe #CVE #infosec", "creation_timestamp": "2026-08-03T23:00:07.236202Z"}, {"uuid": "0a19880c-faef-493d-b6fe-bbd87a8dcf70", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48313", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3f091595-d12a-4563-a4b7-3265b21c20fc", "content": "", "creation_timestamp": "2026-08-05T01:00:36.777495Z"}, {"uuid": "cd5268dc-8afa-48d7-b0a6-b7f90f014652", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48315", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mpji4gsd5h2y", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-48315](https://helpx.adobe.com/security/products/coldfusion/apsb26-68.html)\nColdFusion ...\nhttps://helpx.adobe.com/security/products/coldfusion/apsb26-68.html #ZeroDay #PatchManagement #Vulnerability", "creation_timestamp": "2026-06-30T17:00:58.132086Z"}, {"uuid": "4fcbaf55-23cf-4202-8a88-cf2fa7c80046", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48316", "type": "seen", "source": "https://www.cert.dk/news/2026-07-01/Kritiske-ColdFusion-saarbarheder-aabner-for-fuld-serverovertagelse", "content": "", "creation_timestamp": "2026-07-01T09:45:11.706863Z"}, {"uuid": "c17d99a8-e23e-4911-9ed7-9e08f0a2b56e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48313", "type": "seen", "source": "https://www.cert.dk/news/2026-07-01/Kritiske-ColdFusion-saarbarheder-aabner-for-fuld-serverovertagelse", "content": "", "creation_timestamp": "2026-07-01T09:45:16.870029Z"}, {"uuid": "ebdde5c2-46db-4327-8c97-24c453b3c265", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48315", "type": "seen", "source": "https://www.cert.dk/news/2026-07-01/Kritiske-ColdFusion-saarbarheder-aabner-for-fuld-serverovertagelse", "content": "", "creation_timestamp": "2026-07-01T09:45:19.052087Z"}, {"uuid": "eb5ea2d2-943a-474b-a470-33cc2a51374d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48313", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mpll4ubpnt2q", "content": "\ud83d\udd17 CVE : CVE-2026-48276, CVE-2026-48277, CVE-2026-48281, CVE-2026-48282, CVE-2026-48283, CVE-2026-48285, CVE-2026-48307, CVE-2026-48313, CVE-2026-48314, CVE-2026-48315, CVE-2026-48316", "creation_timestamp": "2026-07-01T13:00:13.327521Z"}, {"uuid": "a6438a6e-081d-4c1a-88c3-f98a3191a90d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48314", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mpll4ubpnt2q", "content": "\ud83d\udd17 CVE : CVE-2026-48276, CVE-2026-48277, CVE-2026-48281, CVE-2026-48282, CVE-2026-48283, CVE-2026-48285, CVE-2026-48307, CVE-2026-48313, CVE-2026-48314, CVE-2026-48315, CVE-2026-48316", "creation_timestamp": "2026-07-01T13:00:13.375311Z"}, {"uuid": "5a103335-8c25-427f-b398-0f49ed6900b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48315", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mpll4ubpnt2q", "content": "\ud83d\udd17 CVE : CVE-2026-48276, CVE-2026-48277, CVE-2026-48281, CVE-2026-48282, CVE-2026-48283, CVE-2026-48285, CVE-2026-48307, CVE-2026-48313, CVE-2026-48314, CVE-2026-48315, CVE-2026-48316", "creation_timestamp": "2026-07-01T13:00:13.418870Z"}, {"uuid": "145bb8b9-d2ab-4505-88ce-cf3fab0c0496", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48316", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mpll4ubpnt2q", "content": "\ud83d\udd17 CVE : CVE-2026-48276, CVE-2026-48277, CVE-2026-48281, CVE-2026-48282, CVE-2026-48283, CVE-2026-48285, CVE-2026-48307, CVE-2026-48313, CVE-2026-48314, CVE-2026-48315, CVE-2026-48316", "creation_timestamp": "2026-07-01T13:00:13.466382Z"}, {"uuid": "17cb8197-4939-4688-ac9b-4763b5d8b766", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48317", "type": "seen", "source": "https://www.ncsc.nl/alerts/kwetsbaarheden-in-adobe-campaign-classic", "content": "", "creation_timestamp": "2026-08-06T16:16:14.968707Z"}, {"uuid": "c70356b4-0967-4425-bfeb-c2b564382dae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48313", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mpotfgidrq26", "content": "~Watchtowr~\nAdobe ColdFusion APSB26-68 patches 11 CVEs including multiple RCE and arbitrary file read/write via RDS and CKEditor path traversal.\n-\nIOCs: CVE-2026-48282, CVE-2026-48276, CVE-2026-48313\n-\n#CVE #ColdFusion #RCE #ThreatIntel", "creation_timestamp": "2026-07-02T20:06:10.741935Z"}, {"uuid": "f3c02861-2e04-4412-b14c-5a1a62127158", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48313", "type": "published-proof-of-concept", "source": "https://labs.watchtowr.com/its-37oc-and-all-we-can-think-about-is-coldfusion-adobe-coldfusion-security-bulletin-apsb26-68-cve-bonanza", "content": "", "creation_timestamp": "2026-07-03T04:01:03.897917Z"}, {"uuid": "5355c27f-ad81-4370-b202-0465f06ae31b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48316", "type": "published-proof-of-concept", "source": "https://labs.watchtowr.com/its-37oc-and-all-we-can-think-about-is-coldfusion-adobe-coldfusion-security-bulletin-apsb26-68-cve-bonanza", "content": "", "creation_timestamp": "2026-07-03T04:01:06.053131Z"}, {"uuid": "881426f3-df3a-4d71-876d-8a37263f9491", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48318", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3msxqwzctcs23", "content": "Adobe\u304cColdFusion\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u30d1\u30c3\u30c1\u3092\u516c\u958b\n\nColdFusion\u3067\u89e3\u6c7a\u3055\u308c\u305f13\u4ef6\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u6b20\u9665\u306e\u3046\u3061\u30018\u4ef6\uff08CVE-2026-48318\u3001CVE-2026-48322\u3001CVE-2026-48284\u3001CVE-2026-48321\u3001CVE-2026-48325\u3001CVE-2026-48319\u3001CVE-2026-48324\u3001CVE-2026-48327\uff09\u306f\u3001\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u3084\u6a29\u9650\u6607\u683c\u306b\u3064\u306a\u304c\u308b\u53ef\u80fd\u6027\u306e\u3042\u308b\u91cd\u5927\u306a\u554f\u984c\u3067\u3059\u3002\n\n\u91cd\u5927\u306a\u8106\u5f31\u6027\u3068\u3057\u3066\u306f\u3001\u30d1\u30b9\u30fb\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u3001\u30b3\u30fc\u30c9\u30fb\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u3001\u4e0d\u9069\u5207\u306a\u5165\u529b\u691c\u8a3c\u3001\u8a8d\u8a3c\u306e\u6b20\u5982\u3001SQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u3001\u304a\u3088\u3073\u4e0d\u9069\u5207\u306a\u8a8d...", "creation_timestamp": "2026-08-13T13:31:52.555734Z"}, {"uuid": "34a54f7b-0cba-4944-ad15-dac6fed127a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48319", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3msxqwzctcs23", "content": "Adobe\u304cColdFusion\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u30d1\u30c3\u30c1\u3092\u516c\u958b\n\nColdFusion\u3067\u89e3\u6c7a\u3055\u308c\u305f13\u4ef6\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u6b20\u9665\u306e\u3046\u3061\u30018\u4ef6\uff08CVE-2026-48318\u3001CVE-2026-48322\u3001CVE-2026-48284\u3001CVE-2026-48321\u3001CVE-2026-48325\u3001CVE-2026-48319\u3001CVE-2026-48324\u3001CVE-2026-48327\uff09\u306f\u3001\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u3084\u6a29\u9650\u6607\u683c\u306b\u3064\u306a\u304c\u308b\u53ef\u80fd\u6027\u306e\u3042\u308b\u91cd\u5927\u306a\u554f\u984c\u3067\u3059\u3002\n\n\u91cd\u5927\u306a\u8106\u5f31\u6027\u3068\u3057\u3066\u306f\u3001\u30d1\u30b9\u30fb\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u3001\u30b3\u30fc\u30c9\u30fb\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u3001\u4e0d\u9069\u5207\u306a\u5165\u529b\u691c\u8a3c\u3001\u8a8d\u8a3c\u306e\u6b20\u5982\u3001SQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u3001\u304a\u3088\u3073\u4e0d\u9069\u5207\u306a\u8a8d...", "creation_timestamp": "2026-08-13T13:31:52.952630Z"}, {"uuid": "06e8916b-4407-4255-af96-3fc0d4d74d16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48316", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mpymnkz2v22j", "content": "CVE-2026-48316\nColdFusion versions 2025.9 and earlier are affected by a security issue that could allow an attacker to execute code with the privileges of the current user. This means an attacker could potentially access\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-06T17:32:04.208961Z"}, {"uuid": "44829175-604c-44aa-abe5-f9e3c5eb256a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48316", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mq2kou357a27", "content": "CVE-2026-48316 - CRITICAL: Unauthenticated RCE in ColdFusion. CVSS 10.0. No patch available. Immediate mitigation required. #CVE #ColdFusion #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-48316/", "creation_timestamp": "2026-07-07T12:02:19.386478Z"}, {"uuid": "eb79a2a6-1875-4905-8917-2d5bcccb5159", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48313", "type": "seen", "source": "https://www.acn.gov.it/portale/w/adobe-aggiornamenti-di-sicurezza-17", "content": "", "creation_timestamp": "2026-07-08T08:45:21.311582Z"}, {"uuid": "525bdc71-a4d9-4e33-bb8a-dc1715c3a715", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48315", "type": "seen", "source": "https://www.acn.gov.it/portale/w/adobe-aggiornamenti-di-sicurezza-17", "content": "", "creation_timestamp": "2026-07-08T08:45:23.501400Z"}, {"uuid": "2355b581-5f35-4ba3-a5ab-453ad12a80d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48316", "type": "seen", "source": "https://www.acn.gov.it/portale/w/adobe-aggiornamenti-di-sicurezza-17", "content": "", "creation_timestamp": "2026-07-08T08:45:25.722388Z"}, {"uuid": "37c15291-a6fe-4a9f-8df9-03f4ecc28f94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48316", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqb2tcjfsr26", "content": "\ud83d\udccc CVE-2026-48316 - ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code executi... https://www.cyberhub.blog/cves/CVE-2026-48316", "creation_timestamp": "2026-07-10T02:07:07.216005Z"}, {"uuid": "754728fe-7736-4bec-ba85-70e635ef43e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48318", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3msygiclvjc2w", "content": "\u300cAdobe ColdFusion\u300d\u306b\u8106\u5f31\u6027 - \u60aa\u7528\u30ea\u30b9\u30af\u9ad8\u304f\u3001\u65e9\u6025\u306b\u5bfe\u5fdc\u3092\n\n\u300cAdobe ColdFusion\u300d\u306b\u3001\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u5224\u660e\u3057\u305f\u3002Adobe\u3067\u306f\u4eca\u5f8c\u60aa\u7528\u3055\u308c\u308b\u53ef\u80fd\u6027\u304c\u9ad8\u3044\u3068\u3057\u3001\u65e9\u6025\u306a\u5bfe\u5fdc\u3092\u6c42\u3081\u3066\u3044\u308b\u3002\n\n...\n\n\u306a\u304b\u3067\u3082\u4f4e\u6a29\u9650\u3067\u60aa\u7528\u3067\u304d\u308b\u30d1\u30b9\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u300cCVE-2026-48318\u300d\u306e\u8106\u5f31\u6027\u306f\u3001\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3055\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308a\u3001\u5171\u901a\u8106\u5f31\u6027\u8a55\u4fa1\u30b7\u30b9\u30c6\u30e0\u300cCVSSv3.1\u300d\u306e\u30d9\u30fc\u30b9\u30b9\u30b3\u30a2\u304c\u300c9.9\u300d\u3068\u9ad8\u3044\u3002\n\n\u30b3\u30fc\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\u300cCVE-2026-48322\u300d\u3084\u5165\u529b\u691c\u8a3c\u4e0d\u5099\u306e\u8106\u5f31\u6027\u300cCVE-2026-48284\u300d\u3001\u8a8d\u53ef\u306e\u4e0d\u5099\u300cCVE-2026-48321\u300d...", "creation_timestamp": "2026-08-13T19:57:20.930181Z"}, {"uuid": "85c08a7d-90c8-4143-ba1c-49f057003061", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48318", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqnbzueboc2x", "content": "CVE-2026-48318 - ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)\nCVE ID : CVE-2026-48318\n \n Published : July 14, 2026, 9:16 p.m. | 35\u00a0minutes ago\n \n Description : ColdFusion is affected by an Improper Limitation of a Pathnam...", "creation_timestamp": "2026-07-14T22:47:59.976621Z"}, {"uuid": "043819df-d6f5-4a2a-bacd-7ef4e3c1ef64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48318", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqndexprug24", "content": "CVE-2026-48318\nColdFusion's security has been compromised, allowing an attacker to access sensitive files without permission. This could lead to data theft or unauthorized changes. To protect your system, update ColdFusion to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-14T23:12:06.413415Z"}, {"uuid": "6c3bff7e-681a-447e-a389-93b09a6a7396", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48319", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqndij2r5s2t", "content": "CVE-2026-48319\nColdFusion has a security flaw that could let hackers run unauthorized code on your server. This could happen without anyone needing to click on anything, making it a serious concern. You should update\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-14T23:14:05.249386Z"}, {"uuid": "7bca10d6-6446-413d-886a-7f7d45308248", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48319", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqndztabyk2g", "content": "CVE-2026-48319 - ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)\nCVE ID : CVE-2026-48319\n \n Published : July 14, 2026, 9:16 p.m. | 35\u00a0minutes ago\n \n Description : ColdFusion is affected by an Improper Limitation of a Pathnam...", "creation_timestamp": "2026-07-14T23:23:46.333067Z"}, {"uuid": "fe9cca31-128c-4e98-ba78-e2c61b67149d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48318", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116922818704001664", "content": "Adobe ColdFusion 2025 is affected by a CRITICAL path traversal vuln (CVE-2026-48318, CVSS 9.9). Attackers can read arbitrary files \u2014 no user interaction. Restrict ColdFusion access & monitor logs until a patch is released. Details: https://radar.offseq.com/threat/cve-2026-48318-improper-limitation-of-a-pathname-t-89bd432b493aca98 #OffSeq #CVE202648318 #ColdFusion #Infosec", "creation_timestamp": "2026-07-15T07:30:28.041616Z"}, {"uuid": "217f42c5-9cfa-4efb-8a6b-75c8a44a5c64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48318", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqo7a5d5rj24", "content": "CVE-2026-48318: CRITICAL path traversal in Adobe ColdFusion 2025 allows attackers to read files outside intended scope. Limit service exposure & monitor activity until patch info is available. https://radar.offseq.com/threat/cve-2026-48318-improper-limitation-of-a-pathname-t-89bd432b493aca98 #Off...", "creation_timestamp": "2026-07-15T07:30:29.654685Z"}, {"uuid": "b343cded-b5c0-4a22-aed8-609e9f44fcdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48318", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqq7ch56to2k", "content": "\ud83d\udccc CVE-2026-48318 - ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary... https://www.cyberhub.blog/cves/CVE-2026-48318", "creation_timestamp": "2026-07-16T02:37:07.145274Z"}, {"uuid": "e7fc4574-030c-4f11-aea0-845db8397715", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48310", "type": "seen", "source": "https://bsky.app/profile/experiencedigest.bsky.social/post/3mqqdjzqrcy2v", "content": "CVE-2026-48310 (HIGH) CVSS 8.6: https://experiencedigest.org/2026/07/15/211707.html", "creation_timestamp": "2026-07-16T03:52:55.524406Z"}, {"uuid": "03dc0086-7d9c-4795-835c-6177b6ee98cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48319", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqqrqk7z6m2z", "content": "\ud83d\udccc CVE-2026-48319 - ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in arbitra... https://www.cyberhub.blog/cves/CVE-2026-48319", "creation_timestamp": "2026-07-16T08:07:06.640997Z"}, {"uuid": "aa7644ef-f871-485a-b4a4-b3c25e351c97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48310", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqvvzojkgg2s", "content": "\ud83d\udccc CVE-2026-48310 - Adobe Experience Manager is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lea... https://www.cyberhub.blog/cves/CVE-2026-48310", "creation_timestamp": "2026-07-18T09:07:07.115165Z"}, {"uuid": "5e9a7897-bc8f-43ce-b6ef-0a6e8d2c0ec6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48316", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mrqictkgjc2q", "content": "\u300cAdobe ColdFusion\u300d\u306b\u8907\u6570\u306e\u6df1\u523b\u306a\u8106\u5f31\u6027 - \u65e9\u6025\u306b\u5bfe\u5fdc\u3092\n\nAdobe\u306f\u3001\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u30b5\u30fc\u30d0\u300cAdobe ColdFusion\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\u304c\u5224\u660e\u3057\u305f\u3068\u3057\u3066\u3001\u5b9a\u4f8b\u5916\u306e\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u516c\u958b\u3057\u305f\u3002\u60aa\u7528\u3055\u308c\u308b\u30ea\u30b9\u30af\u304c\u9ad8\u3044\u3068\u3057\u3001\u3067\u304d\u308b\u3060\u3051\u65e9\u6025\u306b\u5bfe\u51e6\u3059\u308b\u3088\u3046\u6c42\u3081\u3066\u3044\u308b\u3002\n\n...\n\n\u306a\u304b\u3067\u3082\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u306b\u3064\u306a\u304c\u308b6\u4ef6\u300cCVE-2026-48276\u300d\u300cCVE-2026-48277\u300d\u300cCVE-2026-48281\u300d\u300cCVE-2026-48282\u300d\u300cCVE-2026-48283\u300d\u300cCVE-2026-48316\u300d\u306b\u3064\u3044\u3066\u306f\u3001\u5171\u901a\u8106\u5f31\u6027\u8a55\u4fa1\u30b7\u30b9\u30c6\u30e0\u300cCVSSv3.1\u300d\u306e\u30d9\u30fc\u30b9\u30b9\u30b3\u30a2...", "creation_timestamp": "2026-07-28T22:43:35.980419Z"}, {"uuid": "18b31824-76a1-448e-bc79-05622a37d8a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48313", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3mrreknn7qm22", "content": "[RSS] ColdFusion Under Fire: Breaking Down CVE-2026-48283 and CVE-2026-48313\n\n\n horizon3.ai -> \n\n\nOriginal->", "creation_timestamp": "2026-07-29T07:09:02.164684Z"}, {"uuid": "1873677c-b39a-4fcd-8e2b-09a06e465287", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48313", "type": "seen", "source": "https://t.me/haccking/13015", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Adobe ColdFusion (APSB26-68): \u0447\u0442\u0435\u043d\u0438\u0435, \u0437\u0430\u043f\u0438\u0441\u044c \u0438 RCE \u0447\u0435\u0440\u0435\u0437 RDS \u0438 CKEditor\n\n#cve #Adobe #RCE #RDS\n\n30 \u0438\u044e\u043d\u044f 2026 \u0433\u043e\u0434\u0430 Adobe \u0437\u0430\u043a\u0440\u044b\u043b\u0430 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c 11 CVE \u0432 ColdFusion 2025 (Update 9 \u0438 \u043d\u0438\u0436\u0435) \u0438 2023 (Update 20 \u0438 \u043d\u0438\u0436\u0435). \u042d\u0442\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0442\u044b\u0441\u044f\u0447\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 ColdFusion \u0434\u043b\u044f \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u043f\u043e\u0440\u0442\u0430\u043b\u043e\u0432 \u0438 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439. \u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430, \u0447\u0442\u0435\u043d\u0438\u0435\u043c \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 watchTowr \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u043e\u0431\u0440\u0430\u043b\u0438 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 RDS \u0438 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 CKEditor.\n\nRDS \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c SQL-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0438 \u043e\u0442\u043b\u0430\u0436\u0438\u0432\u0430\u0442\u044c \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 HTTP. \u041f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e RDS \u043e\u0442\u043a\u043b\u044e\u0447\u0451\u043d, \u043d\u043e \u0435\u0441\u043b\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0435\u0433\u043e \u0431\u0435\u0437 \u043f\u0430\u0440\u043e\u043b\u044f, \u0441\u0435\u0440\u0432\u0435\u0440 \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c POST-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043a /CFIDE/main/ide.cfm \u0441 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u043c ACTION=FILEIO \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u043c\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044f\u043c\u0438 \u2014 \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u041f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u043f\u0443\u0442\u0435\u0439 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0432\u0435\u0431-\u0448\u0435\u043b\u043b\u044b \u0432 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438.\n\n\u0412 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u043c\u0435\u0442\u043e\u0434 FileReadOperator() \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u043b \u0438\u043c\u044f \u0444\u0430\u0439\u043b\u0430 \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u0432 getFile() \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0443\u0442\u0438 (CVE-2026-48313). \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u043e \u0447\u0438\u0442\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 C:\\Windows\\win.ini. \u041e\u043f\u0435\u0440\u0430\u0446\u0438\u044f WRITE (CVE-2026-48282) \u0442\u0430\u043a\u0436\u0435 \u043d\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u043b\u0430 \u043f\u0443\u0442\u044c, \u0434\u0430\u0432\u0430\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u0432\u0435\u0431-\u0448\u0435\u043b\u043b \u0432 wwwroot \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0435\u0433\u043e \u0447\u0435\u0440\u0435\u0437 HTTP \u0437\u0430\u043f\u0440\u043e\u0441\u044b (RCE).\n\n\u0414\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u0432 CKEditor: \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u0444\u0430\u0439\u043b\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 /cf_scripts/scripts/ajax/ckeditor/plugins/filemanager/upload.cfm. \u041f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 endpoint \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 multipart-\u0437\u0430\u043f\u0440\u043e\u0441 \u0441 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u043c path, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u043c \u043e\u0431\u0445\u043e\u0434 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0439, \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u0444\u0430\u0439\u043b \u0432 \u043b\u044e\u0431\u0443\u044e \u043f\u0430\u043f\u043a\u0443 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 SYSTEM. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0440\u0430\u0437\u043c\u0435\u0441\u0442\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434, \u043d\u043e \u0438 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438. \u042d\u0442\u043e\u0442 \u0436\u0435 \u043f\u0430\u0442\u0447 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u043b\u0438\u0441\u0442\u0438\u043d\u0433 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 filemanager.cfc?method=getfmfiles.\n\n\u0411\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 XSLT-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438, SSRF \u0438 XXE, \u043d\u043e \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u0430\u0441\u0442\u043e\u043c\u043d\u044b\u043c .cfm-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\u043c \u0441 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u043c \u0432\u0432\u043e\u0434\u043e\u043c, \u0447\u0442\u043e \u043c\u0435\u043d\u0435\u0435 \u0442\u0440\u0438\u0432\u0438\u0430\u043b\u044c\u043d\u043e.\n\n\u042d\u0442\u043e \u043d\u0435 \u043f\u0435\u0440\u0432\u044b\u0439 \u0441\u043b\u0443\u0447\u0430\u0439 \u0441 RDS \u2014 watchTowr \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u0447\u0442\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438 \u0437\u0430\u043a\u0440\u044b\u043b\u043e \u0447\u0442\u0435\u043d\u0438\u0435, \u0437\u0430\u043f\u0438\u0441\u044c, \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u0435, \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0439, \u043d\u043e Adobe \u00ab\u0437\u0430\u0431\u044b\u043b\u0430\u00bb \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0442\u044b\u0441\u044f\u0447\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 ColdFusion \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439.\n\nLH | News | OSINT | AI", "creation_timestamp": "2026-09-05T18:00:06.731478Z"}, {"uuid": "f9aad6fe-f1e8-484e-b96a-89362e15f6e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48313", "type": "published-proof-of-concept", "source": "https://t.me/haccking/13015", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Adobe ColdFusion (APSB26-68): \u0447\u0442\u0435\u043d\u0438\u0435, \u0437\u0430\u043f\u0438\u0441\u044c \u0438 RCE \u0447\u0435\u0440\u0435\u0437 RDS \u0438 CKEditor\n\n#cve #Adobe #RCE #RDS\n\n30 \u0438\u044e\u043d\u044f 2026 \u0433\u043e\u0434\u0430 Adobe \u0437\u0430\u043a\u0440\u044b\u043b\u0430 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c 11 CVE \u0432 ColdFusion 2025 (Update 9 \u0438 \u043d\u0438\u0436\u0435) \u0438 2023 (Update 20 \u0438 \u043d\u0438\u0436\u0435). \u042d\u0442\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0442\u044b\u0441\u044f\u0447\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 ColdFusion \u0434\u043b\u044f \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u043f\u043e\u0440\u0442\u0430\u043b\u043e\u0432 \u0438 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439. \u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430, \u0447\u0442\u0435\u043d\u0438\u0435\u043c \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 watchTowr \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u043e\u0431\u0440\u0430\u043b\u0438 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 RDS \u0438 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 CKEditor.\n\nRDS \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c SQL-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0438 \u043e\u0442\u043b\u0430\u0436\u0438\u0432\u0430\u0442\u044c \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 HTTP. \u041f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e RDS \u043e\u0442\u043a\u043b\u044e\u0447\u0451\u043d, \u043d\u043e \u0435\u0441\u043b\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0435\u0433\u043e \u0431\u0435\u0437 \u043f\u0430\u0440\u043e\u043b\u044f, \u0441\u0435\u0440\u0432\u0435\u0440 \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c POST-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043a /CFIDE/main/ide.cfm \u0441 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u043c ACTION=FILEIO \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u043c\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044f\u043c\u0438 \u2014 \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u041f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u043f\u0443\u0442\u0435\u0439 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0432\u0435\u0431-\u0448\u0435\u043b\u043b\u044b \u0432 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438.\n\n\u0412 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u043c\u0435\u0442\u043e\u0434 FileReadOperator() \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u043b \u0438\u043c\u044f \u0444\u0430\u0439\u043b\u0430 \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u0432 getFile() \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0443\u0442\u0438 (CVE-2026-48313). \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u043e \u0447\u0438\u0442\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 C:\\Windows\\win.ini. \u041e\u043f\u0435\u0440\u0430\u0446\u0438\u044f WRITE (CVE-2026-48282) \u0442\u0430\u043a\u0436\u0435 \u043d\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u043b\u0430 \u043f\u0443\u0442\u044c, \u0434\u0430\u0432\u0430\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u0432\u0435\u0431-\u0448\u0435\u043b\u043b \u0432 wwwroot \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0435\u0433\u043e \u0447\u0435\u0440\u0435\u0437 HTTP \u0437\u0430\u043f\u0440\u043e\u0441\u044b (RCE).\n\n\u0414\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u0432 CKEditor: \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u0444\u0430\u0439\u043b\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 /cf_scripts/scripts/ajax/ckeditor/plugins/filemanager/upload.cfm. \u041f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 endpoint \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 multipart-\u0437\u0430\u043f\u0440\u043e\u0441 \u0441 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u043c path, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u043c \u043e\u0431\u0445\u043e\u0434 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0439, \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u0444\u0430\u0439\u043b \u0432 \u043b\u044e\u0431\u0443\u044e \u043f\u0430\u043f\u043a\u0443 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 SYSTEM. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0440\u0430\u0437\u043c\u0435\u0441\u0442\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434, \u043d\u043e \u0438 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438. \u042d\u0442\u043e\u0442 \u0436\u0435 \u043f\u0430\u0442\u0447 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u043b\u0438\u0441\u0442\u0438\u043d\u0433 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 filemanager.cfc?method=getfmfiles.\n\n\u0411\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 XSLT-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438, SSRF \u0438 XXE, \u043d\u043e \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u0430\u0441\u0442\u043e\u043c\u043d\u044b\u043c .cfm-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\u043c \u0441 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u043c \u0432\u0432\u043e\u0434\u043e\u043c, \u0447\u0442\u043e \u043c\u0435\u043d\u0435\u0435 \u0442\u0440\u0438\u0432\u0438\u0430\u043b\u044c\u043d\u043e.\n\n\u042d\u0442\u043e \u043d\u0435 \u043f\u0435\u0440\u0432\u044b\u0439 \u0441\u043b\u0443\u0447\u0430\u0439 \u0441 RDS \u2014 watchTowr \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u0447\u0442\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438 \u0437\u0430\u043a\u0440\u044b\u043b\u043e \u0447\u0442\u0435\u043d\u0438\u0435, \u0437\u0430\u043f\u0438\u0441\u044c, \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u0435, \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0439, \u043d\u043e Adobe \u00ab\u0437\u0430\u0431\u044b\u043b\u0430\u00bb \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0442\u044b\u0441\u044f\u0447\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 ColdFusion \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439.\n\nLH | News | OSINT | AI", "creation_timestamp": "2026-09-06T00:00:38.685934Z"}, {"uuid": "62181aa5-ef9a-4ffb-815d-6a0892b8af0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48313", "type": "published-proof-of-concept", "source": "Telegram/4ITBQs_VeuIKJI_vGsXuapej81LyBL_CkqFO9ehPCpzQhW8", "content": "", "creation_timestamp": "2026-09-12T12:00:05.037079Z"}, {"uuid": "941c5519-3650-4a7b-8266-cafeb97691fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48313", "type": "published-proof-of-concept", "source": "Telegram/xijd_pXali92ICckY7Pfz_ZfF34tolJFnspmAF2EnViaG8Y", "content": "", "creation_timestamp": "2026-09-12T18:00:05.855538Z"}, {"uuid": "f32e95f6-5d63-46de-88da-20ee7e9bb4f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48313", "type": "seen", "source": "Telegram/WA1am3wVED1ihI_ltluQoBPVeOrk0DZDBz6Puwasnq4ACY8", "content": "", "creation_timestamp": "2026-09-12T22:00:06.008535Z"}, {"uuid": "03512018-4813-4822-92b9-7b356cfe066d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48313", "type": "published-proof-of-concept", "source": "Telegram/xijd_pXali92ICckY7Pfz_ZfF34tolJFnspmAF2EnViaG8Y", "content": "", "creation_timestamp": "2026-09-13T00:00:36.585763Z"}, {"uuid": "5be92679-cef1-4530-ba38-08e7be62a357", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48313", "type": "published-proof-of-concept", "source": "Telegram/WA1am3wVED1ihI_ltluQoBPVeOrk0DZDBz6Puwasnq4ACY8", "content": "", "creation_timestamp": "2026-09-13T00:00:06.707893Z"}, {"uuid": "08b72453-f289-4862-a36e-055d1ef7514c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48313", "type": "seen", "source": "Telegram/mrTZfT-xgev30sNQrG5wfoUDAhdRfewFglwj142qioDHDd8", "content": "", "creation_timestamp": "2026-09-13T05:00:04.049700Z"}, {"uuid": "65e1c264-cab9-48bd-a671-b0f37b2cfcf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48313", "type": "published-proof-of-concept", "source": "Telegram/4ITBQs_VeuIKJI_vGsXuapej81LyBL_CkqFO9ehPCpzQhW8", "content": "", "creation_timestamp": "2026-09-13T00:00:53.111596Z"}, {"uuid": "1e772d39-9979-44d3-b391-f3f51f0a5cba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48313", "type": "published-proof-of-concept", "source": "Telegram/MV-6lEfTAEIhei4hXYwO8dT-IrhtJUZgAa0y0F-BLXlRdpY", "content": "", "creation_timestamp": "2026-09-13T22:00:08.575172Z"}, {"uuid": "7fc50272-bce0-47a6-81d3-c9d72c0a3ae5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48313", "type": "published-proof-of-concept", "source": "Telegram/MV-6lEfTAEIhei4hXYwO8dT-IrhtJUZgAa0y0F-BLXlRdpY", "content": "", "creation_timestamp": "2026-09-14T00:00:09.820432Z"}, {"uuid": "8e20624f-23c5-4ef2-ba9e-8f1eae72a52e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48313", "type": "published-proof-of-concept", "source": "Telegram/mrTZfT-xgev30sNQrG5wfoUDAhdRfewFglwj142qioDHDd8", "content": "", "creation_timestamp": "2026-09-14T00:00:31.193114Z"}, {"uuid": "09109c31-0e87-44d9-b2ff-96f4eba73ab0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48313", "type": "seen", "source": "Telegram/QPnhAkcSv65O9z5khy-2YhN2_-wH59LYz7G9vcOVyzjPCUs", "content": "", "creation_timestamp": "2026-09-14T04:00:04.456245Z"}, {"uuid": "27911a6c-ec3e-4c5b-bfdb-07e69fc413ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48313", "type": "published-proof-of-concept", "source": "Telegram/ogktPEPaYzH7h4_etJAszEPQ2lOhy0CQ5rMUy6B8ErhzKPE", "content": "", "creation_timestamp": "2026-09-14T15:00:04.472727Z"}, {"uuid": "85a4b732-58d8-4b8a-abc5-4b117c707b2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48313", "type": "published-proof-of-concept", "source": "Telegram/ogktPEPaYzH7h4_etJAszEPQ2lOhy0CQ5rMUy6B8ErhzKPE", "content": "", "creation_timestamp": "2026-09-15T00:00:20.672085Z"}, {"uuid": "d91b5f08-09e5-4ef3-a7e3-cc71ac91e7aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48313", "type": "published-proof-of-concept", "source": "Telegram/QPnhAkcSv65O9z5khy-2YhN2_-wH59LYz7G9vcOVyzjPCUs", "content": "", "creation_timestamp": "2026-09-15T00:00:30.255105Z"}, {"uuid": "0a2bda13-66e5-4a8c-a7ef-c414c750e8b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48313", "type": "seen", "source": "Telegram/voXjSXn9jH4Uuz8v6oWgQ6wY3LHxoNXW8ZACcBHLR0PcWkA", "content": "", "creation_timestamp": "2026-09-15T14:00:06.137886Z"}]}