NVD CRITICAL: CVE-2026-48362 — ColdFusion is affected by an Improper Neutralization of Special Elements used in...

Tuesday, August 11, 2026 at 05:17 PM UTC·Source: NIST NVD

Updated: Tuesday, August 11, 2026 at 06:00 PM UTC

Executive Summary

ColdFusion is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

Analysis

Indicators of Compromise (1)

CVE (1)

CVE-2026-48362

NVD MITRE CVE

Source Attribution

Originally published by NIST NVD on Aug 11, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerability

Microsoft SharePoint JWT Token Authentication Bypass Technical Analysis (CVE-2026-55040)

[object Object]

CVE-2026-55040

2h agor/blueteamsec

MEDIUMVulnerability

CVE-2026-55040: SharePoint Server Subscription Edition improper JWT validation lead to Arbitrary Account Login

[object Object]

CVE-2026-55040

2h agor/blueteamsec

CRITICALVulnerability

NVD CRITICAL: CVE-2026-15341 — The User Session Synchronizer plugin for WordPress is vulnerable to Authenticati...

The User Session Synchronizer plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all versions up to, and including, 1.4.0. The `synchronize_session()` function, hooked on `init` and therefore executed on every request, performs no nonce, capability, or shared-secret validation against the attacker-supplied `ussync-key`, `ussync-token`, and `ussync-ref` param

CVE-2026-15341

3h agoNIST NVD