CVE-2026-48318

creationtimestamp| type| source ---|---|--- 2026-07-14 22:47:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqnbzueboc2x 2026-07-14 23:12:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqndexprug24 2026-07-15 07:30:28+00:00| seen|...

CVE-2026-48318

CVE-2026-48318 affects ColdFusion with an improper limitation of a pathname to a restricted directory (path traversal) that could enable arbitrary file system reads. The vulnerability allows an attacker to access sensitive files outside the intended scope without user interaction; the CVSS 3.1 ve...