CVEvulnerability
CVE-2026-48329
2.7 LOW
Official page ↗
- Status
- Analyzed
- Published
- 2026-07-14
- Last modified
- 2026-08-28
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 2.7 LOW — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
- Weaknesses
- CWE-613
Description
ColdFusion is affected by an Insufficient Session Expiration vulnerability that could result in a Security feature bypass. A high-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.
Affected configurations
• adobe coldfusion 2023
• adobe coldfusion 2025