CVE-2026-48384
MediumCVSS 4.9Exploitation Probability (EPSS)
Low risk50th percentile - higher than 50% of all known CVEs
Summary
ColdFusion is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker with high privileges could exploit this to crash the application. Exploitation does not require user interaction.
Risk Assessment
The risk is potential application downtime, leading to unavailability of services for users.
Recommendation
Install available patches, restrict user privileges, and monitor systems for unusual behavior.
Original NVD description (English source)
ColdFusion is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker with high privileges could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.