{"vulnerability": "cve-2026-4827", "sightings": [{"uuid": "b6431bd7-f17c-4476-90fb-602be5b864e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4827", "type": "seen", "source": "https://www.acn.gov.it/portale/w/vulnerabilita-in-prodotti-schneider-electric-11", "content": "", "creation_timestamp": "2026-05-12T04:05:34.000000Z"}, {"uuid": "10b861f5-5599-45b8-810c-3ac10bbc8aec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4827", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mlnybqzs6w2w", "content": "\ud83d\udd17 CVE : CVE-2025-0327, CVE-2026-4827, CVE-2026-6332, CVE-2026-6866", "creation_timestamp": "2026-05-12T14:20:40.546161Z"}, {"uuid": "5d3d516b-409d-48fd-afd4-b038af1669f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4827", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlo4j3r4sd2t", "content": "CVE-2026-4827 - Insufficient Entropy vulnerability on Multiple Products\nCVE ID : CVE-2026-4827\n \n Published : May 12, 2026, 1:17 p.m. | 1\u00a0hour, 8\u00a0minutes ago\n \n Description : CWE\u2011331 Insufficient Entropy vulnerability exists that could lead to unauthorized access when an attac...", "creation_timestamp": "2026-05-12T15:35:50.364843Z"}, {"uuid": "a78beb4c-ff52-4702-a9cf-8914971e0d96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48273", "type": "seen", "source": "https://t.me/CyberDispatch/2538", "content": "Adobe on Tuesday rolled out patches for over 50 vulnerabilities across its products, including critical-severity bugs in ColdFusion, Campaign Classic, and Commerce.\n\nWith a priority 1 rating, the ColdFusion update fixes 15 security defects, including three flagged as critical that could lead to arbitrary code execution and application denial-of-service (DoS).\n\nThese include an OS command injection tracked as CVE-2026-48362 (CVSS score of 10/10), an eval injection tracked as CVE-2026-48273 (CVSS score of 9.9/10), and an incorrect authorization tracked as CVE-2026-71384 (CVSS score of 9.6/10).", "creation_timestamp": "2026-08-30T00:00:38.414544Z"}, {"uuid": "9e338048-2ea7-48aa-972e-68c18d1f4cdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-4827", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-169-07", "content": "", "creation_timestamp": "2026-06-18T05:00:00.000000Z"}, {"uuid": "55417216-45b7-4932-af24-1056122103be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48276", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpkgmzkfc726", "content": "\ud83d\udccc CVE-2026-48276 - ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in ... https://www.cyberhub.blog/cves/CVE-2026-48276", "creation_timestamp": "2026-07-01T02:07:07.764126Z"}, {"uuid": "1d82f15a-db22-4e5c-b73f-be04fdf8162d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48277", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpkicnwhvr2v", "content": "\ud83d\udccc CVE-2026-48277 - ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code executi... https://www.cyberhub.blog/cves/CVE-2026-48277", "creation_timestamp": "2026-07-01T02:37:06.981745Z"}, {"uuid": "f3c84f5c-2667-4017-8117-68fa340fa3d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48276", "type": "seen", "source": "https://www.cert.dk/news/2026-07-01/Kritiske-ColdFusion-saarbarheder-aabner-for-fuld-serverovertagelse", "content": "", "creation_timestamp": "2026-07-01T09:45:03.016416Z"}, {"uuid": "d747ad87-35a1-4edc-9c1a-9cae7ca72eaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48277", "type": "seen", "source": "https://www.cert.dk/news/2026-07-01/Kritiske-ColdFusion-saarbarheder-aabner-for-fuld-serverovertagelse", "content": "", "creation_timestamp": "2026-07-01T09:45:07.386843Z"}, {"uuid": "bf6717eb-6d8a-4bf5-82d0-6af032c81470", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48276", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116844608391888622", "content": "CRITICAL vulnerabilities patched in Adobe ColdFusion (2025/2023) & Campaign Classic (7.4.3 build 9397). Multiple CVSS 10.0 flaws incl. CVE-2026-48286, CVE-2026-48276 \u2013 83. No active exploits, but patch ASAP. https://radar.offseq.com/threat/adobe-patches-critical-coldfusion-campaign-classic-baee08e7ac9d8888 #OffSeq #Adobe #ColdFusion #Vuln", "creation_timestamp": "2026-07-01T12:00:35.329807Z"}, {"uuid": "5fb1db67-414e-4886-8610-46590a5f23bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48276", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mpll4ubpnt2q", "content": "\ud83d\udd17 CVE : CVE-2026-48276, CVE-2026-48277, CVE-2026-48281, CVE-2026-48282, CVE-2026-48283, CVE-2026-48285, CVE-2026-48307, CVE-2026-48313, CVE-2026-48314, CVE-2026-48315, CVE-2026-48316", "creation_timestamp": "2026-07-01T13:00:13.031404Z"}, {"uuid": "59867b2f-d3a1-4146-a907-43c5541a8f42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48277", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mpll4ubpnt2q", "content": "\ud83d\udd17 CVE : CVE-2026-48276, CVE-2026-48277, CVE-2026-48281, CVE-2026-48282, CVE-2026-48283, CVE-2026-48285, CVE-2026-48307, CVE-2026-48313, CVE-2026-48314, CVE-2026-48315, CVE-2026-48316", "creation_timestamp": "2026-07-01T13:00:13.085007Z"}, {"uuid": "34d13534-1cb6-44b6-847a-6a9b1434f829", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48277", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpndqa2obu2t", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-48277 \u0432 Adobe ColdFusion: \u0443\u0433\u0440\u043e\u0437\u0430 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/A62F1AD7-81B1-438F-A62E-25F0BBE6EBBF", "creation_timestamp": "2026-07-02T05:53:12.653482Z"}, {"uuid": "119d5ce8-7a75-423a-8de3-df15260baccb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48276", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpndzuc4di2o", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-48276 \u0432 Adobe ColdFusion: \u0443\u0433\u0440\u043e\u0437\u0430 \u043d\u0435\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432\n\n\n\nhttps://kripta.biz/posts/7D8B364D-9D93-4815-B902-60249CCB78B1", "creation_timestamp": "2026-07-02T05:58:35.783586Z"}, {"uuid": "e29fc72f-cb9f-4edf-bc0f-6f895e02cb19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48276", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mpotfgidrq26", "content": "~Watchtowr~\nAdobe ColdFusion APSB26-68 patches 11 CVEs including multiple RCE and arbitrary file read/write via RDS and CKEditor path traversal.\n-\nIOCs: CVE-2026-48282, CVE-2026-48276, CVE-2026-48313\n-\n#CVE #ColdFusion #RCE #ThreatIntel", "creation_timestamp": "2026-07-02T20:06:10.695809Z"}, {"uuid": "d3316c52-a0d0-4e13-9421-d79cfdb21a70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48277", "type": "published-proof-of-concept", "source": "https://labs.watchtowr.com/its-37oc-and-all-we-can-think-about-is-coldfusion-adobe-coldfusion-security-bulletin-apsb26-68-cve-bonanza", "content": "", "creation_timestamp": "2026-07-03T04:00:59.390620Z"}, {"uuid": "1c412c4c-3961-4c01-801f-63c8280b44cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48276", "type": "seen", "source": "https://gist.github.com/alon710/5cc09119469b7bc7e37fcd9f59fdfdb0", "content": "# CVE-2026-48276: CVE-2026-48276: Unrestricted File Upload in Adobe ColdFusion\n\n> **CVSS Score:** 10.0\n> **Published:** 2026-06-30\n> **Full Report:** https://cvereports.com/reports/CVE-2026-48276\n\n## Summary\nAdobe ColdFusion versions 2025.9 and 2023.20 and earlier are affected by an Unrestricted Upload of File with Dangerous Type vulnerability (CWE-434). An unauthenticated remote attacker can exploit this flaw to upload malicious ColdFusion Markup Language (CFML) files directly into web-accessible directories. Accessing the uploaded script triggers arbitrary code execution in the security context of the running service account.\n\n## TL;DR\nA critical-severity unrestricted file upload vulnerability in Adobe ColdFusion allows unauthenticated remote attackers to execute arbitrary system commands via crafted web scripts.\n\n## Technical Details\n\n- **CWE ID**: CWE-434\n- **Attack Vector**: Network (AV:N)\n- **CVSS Score**: 10.0 (Critical)\n- **Exploit Status**: No public exploits currently documented\n- **KEV Status**: Not listed in CISA KEV catalog\n- **Impact**: Unauthenticated Remote Code Execution\n\n## Affected Systems\n\n- Adobe ColdFusion 2023\n- Adobe ColdFusion 2025\n\n## Mitigation\n\n- Deploy official security hotfixes from Adobe immediately.\n- Implement strict web-server level execute permission restrictions on all upload directories.\n- Configure the ColdFusion application runtime to execute under a dedicated low-privilege service account.\n\n**Remediation Steps:**\n1. Audit all corporate networks to locate active ColdFusion 2023 and 2025 deployments.\n2. For ColdFusion 2025 instances, apply Update 10 or later.\n3. For ColdFusion 2023 instances, apply Update 21 or later.\n4. Confirm patch application by reviewing the active updates tab in the ColdFusion Administrator console.\n5. Configure web server execution maps to prevent execution of server-side files within writable storage directories.\n\n## References\n\n- [Official Adobe Security Advisory (APSB26-68)](https://helpx.adobe.com/security/products/coldfusion/apsb26-68.html)\n- [CVE-2026-48276 Record on CVE.org](https://www.cve.org/CVERecord?id=CVE-2026-48276)\n- [Wiz Vulnerability Database Details](https://www.wiz.io/vulnerability-database/cve/cve-2026-48276)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-48276) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-06T11:51:38.029504Z"}, {"uuid": "167f8a2e-f756-4298-a737-c745a0a1ec48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48273", "type": "seen", "source": "https://t.me/CyberDispatch/2538", "content": "Adobe on Tuesday rolled out patches for over 50 vulnerabilities across its products, including critical-severity bugs in ColdFusion, Campaign Classic, and Commerce.\n\nWith a priority 1 rating, the ColdFusion update fixes 15 security defects, including three flagged as critical that could lead to arbitrary code execution and application denial-of-service (DoS).\n\nThese include an OS command injection tracked as CVE-2026-48362 (CVSS score of 10/10), an eval injection tracked as CVE-2026-48273 (CVSS score of 9.9/10), and an incorrect authorization tracked as CVE-2026-71384 (CVSS score of 9.6/10).", "creation_timestamp": "2026-08-29T20:00:05.656226Z"}, {"uuid": "2752a419-fdbd-4164-be2d-0be0565818cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-48276", "type": "seen", "source": "https://bsky.app/profile/getpacketai.bsky.social/post/3mq2nwossau2r", "content": "Critical zero-day in Adobe ColdFusion allows unauthenticated RCE via file upload. CVSS 10.0. If you're running ColdFusion 2023 or 2025, patch\u2026\n\nhttps://dev.to/cverports/cve-2026-48276-cve-2026-48276-unrestricted-file-upload-in-adobe-coldfusion-4f3d\n\n#cybersecurity #infosec", "creation_timestamp": "2026-07-07T13:00:23.502681Z"}, {"uuid": "bd39159e-7dce-45cf-89e2-df442f75a465", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48276", "type": "seen", "source": "https://www.acn.gov.it/portale/w/adobe-aggiornamenti-di-sicurezza-17", "content": "", "creation_timestamp": "2026-07-08T08:45:03.170489Z"}, {"uuid": "7c3d3379-73f5-48a1-84d6-c2a7892deadd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48277", "type": "seen", "source": "https://www.acn.gov.it/portale/w/adobe-aggiornamenti-di-sicurezza-17", "content": "", "creation_timestamp": "2026-07-08T08:45:06.111224Z"}, {"uuid": "a0e178b1-4726-4d6c-8f60-89a3f98260e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48275", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqtpmn4w4q2f", "content": "\ud83d\udccc CVE-2026-48275 - Illustrator is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. Ex... https://www.cyberhub.blog/cves/CVE-2026-48275", "creation_timestamp": "2026-07-17T12:07:07.158517Z"}, {"uuid": "29d515cd-9558-473d-8c9d-90285c11e705", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48276", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mrqictkgjc2q", "content": "\u300cAdobe ColdFusion\u300d\u306b\u8907\u6570\u306e\u6df1\u523b\u306a\u8106\u5f31\u6027 - \u65e9\u6025\u306b\u5bfe\u5fdc\u3092\n\nAdobe\u306f\u3001\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u30b5\u30fc\u30d0\u300cAdobe ColdFusion\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\u304c\u5224\u660e\u3057\u305f\u3068\u3057\u3066\u3001\u5b9a\u4f8b\u5916\u306e\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u516c\u958b\u3057\u305f\u3002\u60aa\u7528\u3055\u308c\u308b\u30ea\u30b9\u30af\u304c\u9ad8\u3044\u3068\u3057\u3001\u3067\u304d\u308b\u3060\u3051\u65e9\u6025\u306b\u5bfe\u51e6\u3059\u308b\u3088\u3046\u6c42\u3081\u3066\u3044\u308b\u3002\n\n...\n\n\u306a\u304b\u3067\u3082\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u306b\u3064\u306a\u304c\u308b6\u4ef6\u300cCVE-2026-48276\u300d\u300cCVE-2026-48277\u300d\u300cCVE-2026-48281\u300d\u300cCVE-2026-48282\u300d\u300cCVE-2026-48283\u300d\u300cCVE-2026-48316\u300d\u306b\u3064\u3044\u3066\u306f\u3001\u5171\u901a\u8106\u5f31\u6027\u8a55\u4fa1\u30b7\u30b9\u30c6\u30e0\u300cCVSSv3.1\u300d\u306e\u30d9\u30fc\u30b9\u30b9\u30b3\u30a2...", "creation_timestamp": "2026-07-28T22:43:35.403772Z"}, {"uuid": "3f5f4409-1247-4eea-a439-13952a7e0407", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48277", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mrqictkgjc2q", "content": "\u300cAdobe ColdFusion\u300d\u306b\u8907\u6570\u306e\u6df1\u523b\u306a\u8106\u5f31\u6027 - \u65e9\u6025\u306b\u5bfe\u5fdc\u3092\n\nAdobe\u306f\u3001\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u30b5\u30fc\u30d0\u300cAdobe ColdFusion\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\u304c\u5224\u660e\u3057\u305f\u3068\u3057\u3066\u3001\u5b9a\u4f8b\u5916\u306e\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u516c\u958b\u3057\u305f\u3002\u60aa\u7528\u3055\u308c\u308b\u30ea\u30b9\u30af\u304c\u9ad8\u3044\u3068\u3057\u3001\u3067\u304d\u308b\u3060\u3051\u65e9\u6025\u306b\u5bfe\u51e6\u3059\u308b\u3088\u3046\u6c42\u3081\u3066\u3044\u308b\u3002\n\n...\n\n\u306a\u304b\u3067\u3082\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u306b\u3064\u306a\u304c\u308b6\u4ef6\u300cCVE-2026-48276\u300d\u300cCVE-2026-48277\u300d\u300cCVE-2026-48281\u300d\u300cCVE-2026-48282\u300d\u300cCVE-2026-48283\u300d\u300cCVE-2026-48316\u300d\u306b\u3064\u3044\u3066\u306f\u3001\u5171\u901a\u8106\u5f31\u6027\u8a55\u4fa1\u30b7\u30b9\u30c6\u30e0\u300cCVSSv3.1\u300d\u306e\u30d9\u30fc\u30b9\u30b9\u30b3\u30a2...", "creation_timestamp": "2026-07-28T22:43:35.770214Z"}, {"uuid": "83d9bcf3-df7d-4a58-a5d7-2f087d2fe75d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48273", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv223t264x2j", "content": "\ud83d\udea8 CVE-2026-48273 \u2014 CVSS 9.9 CRITICAL\n\nColdFusion is affected by an Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Inj...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-48273\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-08T22:11:18.819080Z"}, {"uuid": "67eed910-581b-44a5-83d2-9f5bc08d5440", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48273", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv3hturgru2t", "content": "CVE-2026-48273 - coldfusion 2025\nColdFusion may allow a low\u2011privilege attacker to make the server execute any commands they choose, without needing a victim to click anything. This could give the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#coldfusion2025 #adobe #CVE #infosec", "creation_timestamp": "2026-09-09T11:50:04.342481Z"}, {"uuid": "ef411e39-6986-4f3a-9b4a-3394f385f683", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48276", "type": "published-proof-of-concept", "source": "Telegram/4ITBQs_VeuIKJI_vGsXuapej81LyBL_CkqFO9ehPCpzQhW8", "content": "", "creation_timestamp": "2026-09-12T12:00:05.143464Z"}, {"uuid": "ec4d3d22-da89-4c9a-9541-0795175dc5af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48276", "type": "published-proof-of-concept", "source": "Telegram/xijd_pXali92ICckY7Pfz_ZfF34tolJFnspmAF2EnViaG8Y", "content": "", "creation_timestamp": "2026-09-12T18:00:05.750114Z"}, {"uuid": "d9e96399-2707-46cd-b5b3-f5e7529028f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48276", "type": "seen", "source": "Telegram/WA1am3wVED1ihI_ltluQoBPVeOrk0DZDBz6Puwasnq4ACY8", "content": "", "creation_timestamp": "2026-09-12T22:00:05.029593Z"}, {"uuid": "f307bd01-17fb-45bb-b47f-4b756f58aab6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48276", "type": "published-proof-of-concept", "source": "Telegram/WA1am3wVED1ihI_ltluQoBPVeOrk0DZDBz6Puwasnq4ACY8", "content": "", "creation_timestamp": "2026-09-13T00:00:06.757491Z"}, {"uuid": "a825f682-7398-4bc3-b9f1-513cd8ccb160", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48276", "type": "published-proof-of-concept", "source": "Telegram/xijd_pXali92ICckY7Pfz_ZfF34tolJFnspmAF2EnViaG8Y", "content": "", "creation_timestamp": "2026-09-13T00:00:36.489302Z"}, {"uuid": "d812e918-d434-4640-9459-bfec1eecf0eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48276", "type": "published-proof-of-concept", "source": "Telegram/4ITBQs_VeuIKJI_vGsXuapej81LyBL_CkqFO9ehPCpzQhW8", "content": "", "creation_timestamp": "2026-09-13T00:00:53.208177Z"}, {"uuid": "4cfc2ff0-edda-4295-80cf-ddc5c25446f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48276", "type": "seen", "source": "Telegram/mrTZfT-xgev30sNQrG5wfoUDAhdRfewFglwj142qioDHDd8", "content": "", "creation_timestamp": "2026-09-13T05:00:04.988383Z"}, {"uuid": "f66d22e3-f5fd-46bc-bb17-b1e6ef2cfafd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48273", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mvfpazr4xc2l", "content": "Adobe\u306f\u3001ColdFusion\u304a\u3088\u3073Campaign Classic\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u5373\u6642\u30d1\u30c3\u30c1\u9069\u7528\u3092\u5f37\u304f\u63a8\u5968\u3057\u3066\u3044\u308b\u3002\n\n\u512a\u5148\u5ea61\u306b\u6307\u5b9a\u3055\u308c\u305fColdFusion\u306e\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3067\u306f\u300115\u4ef6\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u6b20\u9665\u304c\u4fee\u6b63\u3055\u308c\u3066\u304a\u308a\u3001\u305d\u306e\u3046\u30613\u4ef6\u306f\u91cd\u5927\u306a\u6b20\u9665\u3068\u3057\u3066\u30d5\u30e9\u30b0\u4ed8\u3051\u3055\u308c\u3066\u304a\u308a\u3001\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u3084\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u306e\u30b5\u30fc\u30d3\u30b9\u62d2\u5426\uff08DoS\uff09\u653b\u6483\u306b\u3064\u306a\u304c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\n\n\u3053\u308c\u3089\u306b\u306f\u3001CVE-2026-48362\uff08CVSS\u30b9\u30b3\u30a210/10\uff09\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308bOS\u30b3\u30de\u30f3\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u3001CVE-2026-48273\uff08CVSS\u30b9\u30b3\u30a29.9/10\uff09\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308beval\u30a4\u30f3\u30b8\u30a7\u30af...", "creation_timestamp": "2026-09-13T13:29:33.558546Z"}, {"uuid": "76da06e4-728e-4195-ab84-9bce8d6e4414", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48276", "type": "published-proof-of-concept", "source": "Telegram/MV-6lEfTAEIhei4hXYwO8dT-IrhtJUZgAa0y0F-BLXlRdpY", "content": "", "creation_timestamp": "2026-09-13T22:00:08.616698Z"}, {"uuid": "fff601c1-a7b0-458c-a702-a9ed87eaaa09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48276", "type": "published-proof-of-concept", "source": "Telegram/MV-6lEfTAEIhei4hXYwO8dT-IrhtJUZgAa0y0F-BLXlRdpY", "content": "", "creation_timestamp": "2026-09-14T00:00:09.879736Z"}, {"uuid": "45d8dbad-66ec-4624-8a1a-d5264910dba6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48276", "type": "published-proof-of-concept", "source": "Telegram/mrTZfT-xgev30sNQrG5wfoUDAhdRfewFglwj142qioDHDd8", "content": "", "creation_timestamp": "2026-09-14T00:00:31.083750Z"}, {"uuid": "95eae796-ac16-4088-872d-8f4e68dfb188", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48276", "type": "seen", "source": "Telegram/QPnhAkcSv65O9z5khy-2YhN2_-wH59LYz7G9vcOVyzjPCUs", "content": "", "creation_timestamp": "2026-09-14T04:00:04.408609Z"}, {"uuid": "cbef1640-0cd3-4323-a31e-244cb196094e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48276", "type": "published-proof-of-concept", "source": "Telegram/ogktPEPaYzH7h4_etJAszEPQ2lOhy0CQ5rMUy6B8ErhzKPE", "content": "", "creation_timestamp": "2026-09-14T15:00:04.416250Z"}, {"uuid": "8c451664-e517-4013-b494-9f14582aa4e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48276", "type": "published-proof-of-concept", "source": "Telegram/ogktPEPaYzH7h4_etJAszEPQ2lOhy0CQ5rMUy6B8ErhzKPE", "content": "", "creation_timestamp": "2026-09-15T00:00:20.646726Z"}, {"uuid": "0426f610-f6db-4724-9c3f-7ee7b17ef37b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48276", "type": "published-proof-of-concept", "source": "Telegram/QPnhAkcSv65O9z5khy-2YhN2_-wH59LYz7G9vcOVyzjPCUs", "content": "", "creation_timestamp": "2026-09-15T00:00:30.217454Z"}, {"uuid": "d6b56da3-193e-4779-8b81-316fc05a28bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48273", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mvjp3w3oxw2u", "content": "\ud83d\udccc CVE-2026-48273 - ColdFusion is affected by an Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') vulnerability that could result in... https://www.cyberhub.blog/cves/CVE-2026-48273", "creation_timestamp": "2026-09-15T03:37:07.742818Z"}, {"uuid": "51fd73de-3ff3-4ebd-8c42-4ac4dd1e0a30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48276", "type": "seen", "source": "Telegram/voXjSXn9jH4Uuz8v6oWgQ6wY3LHxoNXW8ZACcBHLR0PcWkA", "content": "", "creation_timestamp": "2026-09-15T14:00:06.190540Z"}, {"uuid": "7fe5cfa0-d7b4-404f-b43c-c1300ceb080a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48276", "type": "seen", "source": "Telegram/cHChk-32VMe1rqwRa6GJfVvCPJWnYrhIFRNxIOW8bZ4FvwU", "content": "", "creation_timestamp": "2026-09-15T23:00:05.489262Z"}, {"uuid": "14f240bc-edea-4110-b2f3-f81b06a8c7c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48276", "type": "seen", "source": "Telegram/_TFxB3pDnXrZuvduo2zkQLN-Ru_utGkCFI6p0IlRWz_Xk3s", "content": "", "creation_timestamp": "2026-09-15T20:00:05.011671Z"}, {"uuid": "1708c3dd-b4c9-40d9-a985-306451d7400e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48276", "type": "published-proof-of-concept", "source": "Telegram/cHChk-32VMe1rqwRa6GJfVvCPJWnYrhIFRNxIOW8bZ4FvwU", "content": "", "creation_timestamp": "2026-09-16T00:00:08.279746Z"}, {"uuid": "6ad10017-d224-4ad0-98ac-945a22e04d3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48276", "type": "published-proof-of-concept", "source": "Telegram/_TFxB3pDnXrZuvduo2zkQLN-Ru_utGkCFI6p0IlRWz_Xk3s", "content": "", "creation_timestamp": "2026-09-16T00:00:11.571479Z"}, {"uuid": "b3a6355d-50f5-4b2c-8d39-d6ffee7950f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48276", "type": "published-proof-of-concept", "source": "Telegram/voXjSXn9jH4Uuz8v6oWgQ6wY3LHxoNXW8ZACcBHLR0PcWkA", "content": "", "creation_timestamp": "2026-09-16T00:00:30.594017Z"}]}