CVE-2026-48440
HighCVSS 8.1Exploitation Probability (EPSS)
Low risk44th percentile - higher than 44% of all known CVEs
Summary
ColdFusion is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation depends on conditions beyond the attacker's control. Exploitation does not require user interaction.
Risk Assessment
Risk of arbitrary code execution on the ColdFusion server, potentially leading to compromise of the application and data.
Recommendation
Install the latest security patches for ColdFusion and monitor the system for unusual activity.
Original NVD description (English source)
ColdFusion is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction.