CVE-2026-48362: Critical OS Command Injection in Adobe ColdFusion

A CVSS 10.0 operating system command injection vulnerability in Adobe ColdFusion that could allow arbitrary code execution. Fixed in versions 2025.0.12 and 2023.0.23.