CVE-2026-48386

ColdFusion is affected by a Use of a Broken or Risky Cryptographic Algorithm vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue does not require user interaction.

• CWE-327

• https://helpx.adobe.com/security/products/coldfusion/apsb26-90.html

Published

Aug 11, 2026

Last Modified

Aug 11, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-48375ColdFusion is affected by an Incorrect Authorization vulnera…6.5
• CVE-2026-48376is affected by an Improper Encoding or Escaping of Output vu…5.4
• CVE-2026-4838A flaw has been found in SourceCodester Malawi Online Market…7.3
• CVE-2026-48381Adobe Campaign Classic (ACC) is affected by an Improper Neut…9
• CVE-2026-48384ColdFusion is affected by an Improper Input Validation vulne…4.9
• CVE-2026-48385ColdFusion is affected by an Improper Neutralization of Spec…7.7
• CVE-2026-48387CAI Content Credentials is affected by an Integer Overflow o…6.2
• CVE-2026-48388Adobe Photoshop Installer was affected by an Uncontrolled Se…8.6
• CVE-2026-48389DNG SDK versions 1.7.1 2536 and earlier are affected by a St…7.8
• CVE-2026-4839A vulnerability has been found in SourceCodester Food Orderi…7.3
• CVE-2026-48390Bridge is affected by an Incorrect Authorization vulnerabili…8.2
• CVE-2026-48391Bridge is affected by an Untrusted Search Path vulnerability…8.2