CVE Tools
Track your stack

Adobe patches seven max severity ColdFusion, Campaign flaws

BleepingComputerBy Sergiu Gatlan

PatchColdFusionAdobe Campaign Classic

Our summary

Adobe has released updates addressing seven maximum-severity vulnerabilities across its ColdFusion web application platform and Adobe Campaign Classic marketing automation product. The ColdFusion issues (CVE-2026-48276, CVE-2026-48277, CVE-2026-48281, CVE-2026-48316, and CVE-2026-48282) affect ColdFusion versions 2025.9, 2023.20 and earlier and could enable remote code execution without user interaction or special privileges. A Campaign Classic flaw (CVE-2026-48286) affecting versions 7.4.3 build 9396 and earlier can allow arbitrary code execution in the context of the current user, and Adobe notes it impacts only on-premises instances.

Read at BleepingComputer

BleepingComputer publishes this story on its own site; we link to it rather than reprint it.

  1. Хакер (xakep.ru)Критический баг в Adobe ColdFusion уже используется в атакахCVE-2026-48276, CVE-2026-48277 +4
  2. The Hacker News⚡ Weekly Recap: Proxy Botnets, Browser Ransomware, AI Agent Tricks, Fake PoC Malware and MoreCVE-2026-48276, CVE-2026-48277 +4
  3. The Hacker NewsAdobe Patches 7 CVSS 10.0 Flaws in ColdFusion and Campaign ClassicCVE-2026-48276, CVE-2026-48277 +4
  4. SecurityWeekAdobe Patches Critical ColdFusion, Campaign Classic VulnerabilitiesCVE-2026-48276, CVE-2026-48277 +4
  5. watchTowr LabsIt’s 37oC, And All We Can Think About Is ColdFusion (Adobe ColdFusion Security Bulletin APSB26-68 CVE Bonanza)CVE-2026-48276, CVE-2026-48277 +3
  6. BleepingComputerCISA orders feds to patch max severity ColdFusion flaw by FridayCVE-2026-34621, CVE-2026-48282
  7. Help Net SecurityAttackers exploit critical Adobe ColdFusion vulnerability (CVE-2026-48282)CVE-2026-48276, CVE-2026-48282
  8. BleepingComputerMax severity Adobe ColdFusion flaw now exploited in attacksCVE-2026-34621, CVE-2026-48282
  9. Help Net SecurityWeek in review: Accenture data breach, great open-source cybersecurity toolsCVE-2026-48282
  10. Help Net SecurityJuly 2026 Patch Tuesday forecast: Is CVE tracking still practical?CVE-2026-48282

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store