{"vulnerability": "CVE-2026-4832", "sightings": [{"uuid": "a83f7793-c5c8-4482-b743-f10c308b8037", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4832", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mjhhczv3ac2r", "content": "", "creation_timestamp": "2026-04-14T13:10:17.541070Z"}, {"uuid": "0e07fe92-1134-48f7-a5c6-b9628dd474f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4832", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-190-03", "content": "", "creation_timestamp": "2026-07-09T16:15:03.405033Z"}, {"uuid": "1c16f879-728a-494f-87df-9604edd9f54e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48327", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqnchrpcwo2e", "content": "CVE-2026-48327 - ColdFusion | Incorrect Authorization (CWE-863)\nCVE ID : CVE-2026-48327\n \n Published : July 14, 2026, 9:16 p.m. | 35\u00a0minutes ago\n \n Description : ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in...", "creation_timestamp": "2026-07-14T22:55:47.076548Z"}, {"uuid": "241b00e0-feae-49a3-9159-44093f6aabfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48324", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqncl5chk42x", "content": "CVE-2026-48324 - ColdFusion | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)\nCVE ID : CVE-2026-48324\n \n Published : July 14, 2026, 9:16 p.m. | 35\u00a0minutes ago\n \n Description : ColdFusion is affected by an Improper Neutralization of...", "creation_timestamp": "2026-07-14T22:57:39.808619Z"}, {"uuid": "62b9a2a4-ea4b-4e99-9023-3079c4fc11fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48321", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqnd36x7a725", "content": "CVE-2026-48321 - ColdFusion | Incorrect Authorization (CWE-863)\nCVE ID : CVE-2026-48321\n \n Published : July 14, 2026, 9:16 p.m. | 35\u00a0minutes ago\n \n Description : ColdFusion is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An at...", "creation_timestamp": "2026-07-14T23:06:38.514079Z"}, {"uuid": "36dcfe59-5f6a-4b4a-80d5-6e78dab361c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48325", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqndfhf7vy27", "content": "CVE-2026-48325 - ColdFusion | Missing Authentication for Critical Function (CWE-306)\nCVE ID : CVE-2026-48325\n \n Published : July 14, 2026, 9:16 p.m. | 35\u00a0minutes ago\n \n Description : ColdFusion is affected by a Missing Authentication for Critical Function vulnerability that co...", "creation_timestamp": "2026-07-14T23:12:22.720360Z"}, {"uuid": "11d292b1-6465-4101-ba2a-9b7d787b70fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48321", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqndikflja2h", "content": "CVE-2026-48321\nA security issue in ColdFusion could allow an attacker to access sensitive data or make changes without permission. This could happen without the user's knowledge or action. To protect your system, update\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-14T23:14:06.557276Z"}, {"uuid": "ba7df2f5-0f4e-45e0-92bc-aea0cde1cfc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48322", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqndlgi7gn24", "content": "CVE-2026-48322 - ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94)\nCVE ID : CVE-2026-48322\n \n Published : July 14, 2026, 9:16 p.m. | 35\u00a0minutes ago\n \n Description : ColdFusion is affected by an Improper Control of Generation of Code ('Code Injecti...", "creation_timestamp": "2026-07-14T23:15:43.216021Z"}, {"uuid": "2dd263b8-4026-4d61-b2f8-252af65623b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48322", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqndm2hgox2b", "content": "CVE-2026-48322\nColdFusion software contains a vulnerability that allows an attacker to execute malicious code on a user's system. This means an attacker could potentially take control of a user's account and access sensitive\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-14T23:16:04.142598Z"}, {"uuid": "e2b058a3-e43a-4fd9-be73-1dcf5a91f318", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48324", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqndm3tvq72b", "content": "CVE-2026-48324\nColdFusion software is at risk of being exploited by malicious code that can execute arbitrary actions with the current user's permissions. This vulnerability can be exploited without user interaction, making\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-14T23:16:05.560548Z"}, {"uuid": "43b36273-1cbf-406e-ab15-29ab0d79c06a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48325", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqndpmxbgv2v", "content": "CVE-2026-48325\nAdobe ColdFusion is vulnerable to a security flaw that could let attackers run malicious code on a user's account. This means an attacker could potentially access sensitive information or perform actions as the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-14T23:18:04.203664Z"}, {"uuid": "b12963f5-b363-4e2c-8937-b5b76824f7e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48327", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqndpo57ko24", "content": "CVE-2026-48327\nAn attacker can access user accounts without permission, potentially leading to sensitive data exposure or malicious activity. This issue affects ColdFusion, a web development platform. To mitigate the risk,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-14T23:18:05.325781Z"}, {"uuid": "800ce51d-1ece-437f-8c9c-38235402bbab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48320", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqnelqe7pw25", "content": "CVE-2026-48320 - ColdFusion | Cross-site Scripting (Reflected XSS) (CWE-79)\nCVE ID : CVE-2026-48320\n \n Published : July 14, 2026, 9:16 p.m. | 35\u00a0minutes ago\n \n Description : ColdFusion is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could explo...", "creation_timestamp": "2026-07-14T23:33:47.255265Z"}, {"uuid": "0d9fb17c-1b53-4373-931a-1340ba7c9f69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48324", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116922464631643074", "content": "CVE-2026-48324 (CRITICAL, CVSS 9.1): Adobe ColdFusion 2025 suffers from an SQL Injection (CWE-89) allowing arbitrary code execution. No patch confirmed \u2014 restrict access & monitor SQL activity. https://radar.offseq.com/threat/cve-2026-48324-improper-neutralization-of-special--e4f7ad5cedb0440f #OffSeq #ColdFusion #SQLInjection #Vuln", "creation_timestamp": "2026-07-15T06:00:25.224044Z"}, {"uuid": "7bb025c8-e4b9-44f6-a77d-46097606904f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48324", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqo2753h3w2c", "content": "Adobe ColdFusion 2025 faces a CRITICAL SQL Injection (CVE-2026-48324, CVSS 9.1) enabling code execution. Patch not confirmed \u2014 restrict access & monitor for attacks now. https://radar.offseq.com/threat/cve-2026-48324-improper-neutralization-of-special--e4f7ad5cedb0440f #OffSeq #ColdFusion #Vulner...", "creation_timestamp": "2026-07-15T06:00:27.609877Z"}, {"uuid": "d1c8d0df-ce3c-49eb-8d61-4612aa97a8d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48327", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116923526486640924", "content": "Adobe ColdFusion 2025 hit by CRITICAL CVE-2026-48327: Incorrect Authorization (CVSS 9.0) enables arbitrary code execution \u2014 no user interaction needed. Restrict network access & limit privileges until patch released. https://radar.offseq.com/threat/cve-2026-48327-incorrect-authorization-cwe-863-in--27904a5083d83266 #OffSeq #ColdFusion #CVE202648327 #Infosec", "creation_timestamp": "2026-07-15T10:30:27.885315Z"}, {"uuid": "07348b1b-9ff7-40ef-93ef-f2f33ce6a290", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48327", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqojbywmil2a", "content": "CRITICAL: Adobe ColdFusion 2025 is vulnerable (CVE-2026-48327, CVSS 9.0) to remote code execution \u2014 no user interaction required. Restrict access and limit privileges until fix is confirmed. https://radar.offseq.com/threat/cve-2026-48327-incorrect-authorization-cwe-863-in--27904a5083d83266 #OffSe...", "creation_timestamp": "2026-07-15T10:30:29.514888Z"}, {"uuid": "cec5a001-2826-4d3c-9eb4-9d65bda5e3a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48320", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqpeqzsbtx2y", "content": "CVE-2026-48320 - coldfusion\nA security issue in ColdFusion can allow an attacker to inject malicious code into a web page if a user opens a malicious file. This could potentially allow the attacker to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#coldfusion #adobe #CVE #infosec", "creation_timestamp": "2026-07-15T18:42:04.404338Z"}, {"uuid": "79945dc0-e929-486d-a0c8-850cca11a209", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48322", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqqfyzis4p2h", "content": "\ud83d\udccc CVE-2026-48322 - ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in ... https://www.cyberhub.blog/cves/CVE-2026-48322", "creation_timestamp": "2026-07-16T04:37:06.587860Z"}, {"uuid": "f352b198-9dce-442c-8141-395a687f1829", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48325", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqqkzxpxb726", "content": "\ud83d\udccc CVE-2026-48325 - ColdFusion is affected by a Missing Authentication for Critical Function vulnerability that could result in arbitrary code execution in the context of... https://www.cyberhub.blog/cves/CVE-2026-48325", "creation_timestamp": "2026-07-16T06:07:06.719789Z"}, {"uuid": "f35fea94-54e3-4bbe-8220-77e368dbff4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48321", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqqmpma2kc2z", "content": "\ud83d\udccc CVE-2026-48321 - ColdFusion is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerab... https://www.cyberhub.blog/cves/CVE-2026-48321", "creation_timestamp": "2026-07-16T06:37:07.062847Z"}, {"uuid": "2a0d2b6b-1512-442e-a23c-a1e7fb4b922a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48324", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqqq2w6rh42h", "content": "\ud83d\udccc CVE-2026-48324 - ColdFusion is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in a... https://www.cyberhub.blog/cves/CVE-2026-48324", "creation_timestamp": "2026-07-16T07:37:07.223730Z"}, {"uuid": "612e255e-c78c-4d2f-9c6e-45974b8ea00e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48327", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqqyh4likh2z", "content": "\ud83d\udccc CVE-2026-48327 - ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. E... https://www.cyberhub.blog/cves/CVE-2026-48327", "creation_timestamp": "2026-07-16T10:07:06.659415Z"}, {"uuid": "847bfc4f-0f6e-4c64-a68e-f6518f68fc56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48320", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqrux3g55v2u", "content": "\ud83d\udccc CVE-2026-48320 - ColdFusion is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scrip... https://www.cyberhub.blog/cves/CVE-2026-48320", "creation_timestamp": "2026-07-16T18:37:07.297515Z"}]}