{"vulnerability": "cve-2026-48273", "sightings": [{"uuid": "a78beb4c-ff52-4702-a9cf-8914971e0d96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48273", "type": "seen", "source": "https://t.me/CyberDispatch/2538", "content": "Adobe on Tuesday rolled out patches for over 50 vulnerabilities across its products, including critical-severity bugs in ColdFusion, Campaign Classic, and Commerce.\n\nWith a priority 1 rating, the ColdFusion update fixes 15 security defects, including three flagged as critical that could lead to arbitrary code execution and application denial-of-service (DoS).\n\nThese include an OS command injection tracked as CVE-2026-48362 (CVSS score of 10/10), an eval injection tracked as CVE-2026-48273 (CVSS score of 9.9/10), and an incorrect authorization tracked as CVE-2026-71384 (CVSS score of 9.6/10).", "creation_timestamp": "2026-08-30T00:00:38.414544Z"}, {"uuid": "167f8a2e-f756-4298-a737-c745a0a1ec48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48273", "type": "seen", "source": "https://t.me/CyberDispatch/2538", "content": "Adobe on Tuesday rolled out patches for over 50 vulnerabilities across its products, including critical-severity bugs in ColdFusion, Campaign Classic, and Commerce.\n\nWith a priority 1 rating, the ColdFusion update fixes 15 security defects, including three flagged as critical that could lead to arbitrary code execution and application denial-of-service (DoS).\n\nThese include an OS command injection tracked as CVE-2026-48362 (CVSS score of 10/10), an eval injection tracked as CVE-2026-48273 (CVSS score of 9.9/10), and an incorrect authorization tracked as CVE-2026-71384 (CVSS score of 9.6/10).", "creation_timestamp": "2026-08-29T20:00:05.656226Z"}, {"uuid": "83d9bcf3-df7d-4a58-a5d7-2f087d2fe75d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48273", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mv223t264x2j", "content": "\ud83d\udea8 CVE-2026-48273 \u2014 CVSS 9.9 CRITICAL\n\nColdFusion is affected by an Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Inj...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-48273\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-08T22:11:18.819080Z"}, {"uuid": "67eed910-581b-44a5-83d2-9f5bc08d5440", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48273", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv3hturgru2t", "content": "CVE-2026-48273 - coldfusion 2025\nColdFusion may allow a low\u2011privilege attacker to make the server execute any commands they choose, without needing a victim to click anything. This could give the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#coldfusion2025 #adobe #CVE #infosec", "creation_timestamp": "2026-09-09T11:50:04.342481Z"}]}