Adobe on Tuesday introduced safety updates for ColdFusion and Marketing campaign Traditional to resolve half a dozen most severity vulnerabilities.<\/strong><\/p>\n

The replace for Adobe Marketing campaign Traditional resolves<\/a> CVE-2026-48286<\/strong> (CVSS rating of 10\/10), an incorrect authorization challenge that would enable attackers to execute arbitrary code.<\/p>\n

Patches for the flaw had been included in Adobe Marketing campaign Traditional model 7.4.3 construct 9397, which is now rolling out to Home windows and Linux customers.<\/p>\n

Updates launched<\/a> for ColdFusion variations 2025 and 2023 tackle 11 safety defects, together with six which have a most severity ranking of 10\/10.<\/p>\n

Tracked as CVE-2026-48276, CVE-2026-48277, CVE-2026-48281, CVE-2026-48316, CVE-2026-48282, and CVE-2026-48283, the vulnerabilities might result in arbitrary code execution, Adobe\u2019s advisory reveals.<\/p>\n

In response to Adobe, these flaws are rooted within the unrestricted add of recordsdata with harmful varieties, improper enter validation, and path traversal weaknesses.<\/p>\n

Commercial. Scroll to proceed studying.<\/span><\/div>\n
Two different critical-severity bugs resolved in ColdFusion, CVE-2026-48313 and CVE-2026-48315 (CVSS rating of 9.3), are described as path traversal and improper enter validation points that would result in arbitrary file system learn and privilege escalation.<\/p>\n
The replace additionally resolves CVE-2026-48307 (CVSS rating of 8.8), an XSS defect resulting in arbitrary code execution, CVE-2026-48285 (CVSS rating of 8.6), a SSRF flaw resulting in safety function bypass, and CVE-2026-48314, a medium-severity path traversal resulting in privilege escalation.<\/p>\n
Fixes for all vulnerabilities had been included in ColdFusion 2025 Replace 10 and ColdFusion 2023 Replace 21.<\/p>\n
Adobe says it isn’t conscious of any public exploits concentrating on these safety defects, however has assigned a precedence ranking of 1 to each safety updates, which signifies that the failings might find yourself being exploited in assaults. Customers are suggested to replace their purposes as quickly as attainable.<\/p>\n
Associated:<\/strong> Apple Patches Dozens of Vulnerabilities Throughout iOS, macOS, and Safari<\/a><\/p>\n
Associated:<\/strong> \u2018DirtyClone\u2019 Linux Kernel Vulnerability Results in Root Entry<\/a><\/p>\n
Associated:<\/strong> BlueHammer Vulnerability Exploited in Ransomware Assaults<\/a><\/p>\n
Associated:<\/strong> GitLab Patches Code Execution, Info Disclosure Vulnerabilities<\/a>\n <\/p>\n<\/div>\n\n","protected":false},"excerpt":{"rendered":"
Adobe on Tuesday introduced safety updates for ColdFusion and Marketing campaign Traditional to resolve half a dozen most severity vulnerabilities. The replace for Adobe Marketing campaign Traditional resolves CVE-2026-48286 (CVSS rating of 10\/10), an incorrect authorization challenge that would enable attackers to execute arbitrary code. Patches for the flaw had been included in Adobe Marketing […]<\/p>\n","protected":false},"author":2,"featured_media":16278,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[58],"tags":[7649,396,918,9600,420,6544,2721],"class_list":["post-16276","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-adobe","tag-campaign","tag-classic","tag-coldfusion","tag-critical","tag-patches","tag-vulnerabilities"],"_links":{"self":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts\/16276","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=16276"}],"version-history":[{"count":1,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts\/16276\/revisions"}],"predecessor-version":[{"id":16277,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts\/16276\/revisions\/16277"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/media\/16278"}],"wp:attachment":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=16276"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=16276"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=16276"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}