⌁ CyberSecurityBoardThreat Intel · CVEs · Products
Critical CVEs

CVE-2026-48273: Eval Injection in Adobe ColdFusion

August 12, 2026

A CVSS 9.9 eval injection vulnerability in Adobe ColdFusion that could lead to arbitrary code execution. Fixed in versions 2025.0.12 and 2023.0.23.

Discovered from: Adobe Patches Critical ColdFusion and Campaign Classic Flaws with Multiple CVSS 10.0 Ratings