CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-48318 — ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted D...

·Source: NIST NVD

Updated:

Executive Summary

ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction. Scope is changed.

Analysis

ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction. Scope is changed. CVSS Score: 9.9. Published: 2026-07-14T21:16:58.493.

Indicators of Compromise (1)

CVE (1)
CVE-2026-48318
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Jul 14, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerabilityNEW

LemFi taps BVNK to move cross-border payments on to stablecoin rails

We’ve partnered with BVNK, an enterprise-grade stablecoin payments infrastructure company, to rebuild the rails beneath the diaspora economy.

Finextra
MEDIUMVulnerabilityNEW

Revolut secures Australian banking licence

Revolut has been granted a full Deposit-taking Institution (ADI) licence by the Australian Prudential Regulation Authority, marking its official launch as a licensed bank in Australia and its first banking entity in the Apac region

Finextra
MEDIUMVulnerability

What the World Cup can teach us about cybersecurity resilience

Future major events can’t rely on yesterday's playbook. Lessons from the World Cup show why true cyber resilience starts months before kickoff and extends far beyond stadium perimeters. The post What the World Cup can teach us about cybersecurity resilience appeared first on CyberScoop .

CyberScoop