{"id":5957,"date":"2026-07-13T18:04:52","date_gmt":"2026-07-13T18:04:52","guid":{"rendered":"https:\/\/securitybriefing.net\/?p=5957"},"modified":"2026-07-23T16:58:57","modified_gmt":"2026-07-23T16:58:57","slug":"cisa-adobe-coldfusion-rce-cve-2026-48282-kev","status":"publish","type":"post","link":"https:\/\/securitybriefing.net\/ro\/alerte-cibernetice\/cisa-adobe-coldfusion-rce-cve-2026-48282-kev\/","title":{"rendered":"CISA Flags Actively Exploited Adobe ColdFusion RCE (CVE-2026-48282, CVSS 10.0)"},"content":{"rendered":"<p>On July 7, 2026, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a maximum-severity Adobe ColdFusion vulnerability to its <a href=\"https:\/\/www.cisa.gov\/known-exploited-vulnerabilities-catalog\" target=\"_blank\" rel=\"noopener\">Known Exploited Vulnerabilities (KEV) catalog<\/a>, warning that it is being exploited in the wild. Tracked as <strong><a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-48282\" target=\"_blank\" rel=\"noopener\">CVE-2026-48282<\/a><\/strong> and rated CVSS 10.0, the flaw lets an unauthenticated attacker achieve remote code execution &mdash; and federal agencies were given only until July 10 to patch under Binding Operational Directive 26-04.<\/p>\n<h2>Path traversal in the RDS handler, leading to unauthenticated RCE<\/h2>\n<p>CVE-2026-48282 is an improper path-limitation flaw (CWE-22) in ColdFusion&#8217;s Remote Development Services (RDS) FILEIO handler. Because the handler fails to properly validate paths, an unauthenticated attacker can write arbitrary files anywhere on the server&#8217;s file system &mdash; including the web root. Dropping a malicious file into a web-accessible directory turns that file-write into full, unauthenticated remote code execution. No login and no user interaction are required, which is exactly why it earns a perfect 10.0.<\/p>\n<h2>Patched June 30, exploited by July 7<\/h2>\n<p>Adobe shipped fixes on June 30, 2026 for the ColdFusion 2023 and 2025 release lines. One week later, CISA confirmed active exploitation and added the CVE to KEV with a three-day remediation deadline. That compressed timeline is a signal in itself &mdash; CISA reserves the tightest windows for bugs being weaponized right now. ColdFusion also has a long history of being targeted: its RCE flaws are a recurring favorite of ransomware operators and initial-access brokers.<\/p>\n<h2>What to do now<\/h2>\n<p>If you run Adobe ColdFusion 2023 or 2025, apply the June 30 security updates immediately. Beyond patching, Remote Development Services should never be exposed to the internet: disable RDS in production if it is not needed, and restrict access to ColdFusion administration interfaces. Because exploitation is unauthenticated and leads directly to code execution, treat any internet-facing ColdFusion server that stayed unpatched after June 30 as potentially compromised, and hunt for unexpected files in web-accessible directories.<\/p>","protected":false},"excerpt":{"rendered":"<p>CISA added the actively exploited Adobe ColdFusion RDS path-traversal flaw CVE-2026-48282 (CVSS 10.0) to its KEV catalog, enabling unauthenticated RCE.<\/p>","protected":false},"author":3,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[40],"tags":[],"class_list":["post-5957","post","type-post","status-publish","format-standard","hentry","category-cyber-alerts","entry"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v26.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>CISA Flags Exploited Adobe ColdFusion RCE CVE-2026-48282<\/title>\n<meta name=\"description\" content=\"CISA added Adobe ColdFusion flaw CVE-2026-48282 (CVSS 10.0) to its KEV catalog.\" \/>\n<meta name=\"robots\" content=\"noindex, follow\" \/>\n<meta property=\"og:locale\" content=\"ro_RO\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"CISA Flags Exploited Adobe ColdFusion RCE CVE-2026-48282\" \/>\n<meta property=\"og:description\" content=\"CISA added Adobe ColdFusion flaw CVE-2026-48282 (CVSS 10.0) to its KEV catalog.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/securitybriefing.net\/ro\/alerte-cibernetice\/cisa-adobe-coldfusion-rce-cve-2026-48282-kev\/\" \/>\n<meta property=\"og:site_name\" content=\"Security Briefing\" \/>\n<meta property=\"article:published_time\" content=\"2026-07-13T18:04:52+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-07-23T16:58:57+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/securitybriefing.net\/wp-content\/uploads\/2025\/09\/main-logo-black.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"300\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"C\u00e9sar Daniel Barreto\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Scris de\" \/>\n\t<meta name=\"twitter:data1\" content=\"C\u00e9sar Daniel Barreto\" \/>\n\t<meta name=\"twitter:label2\" content=\"Timp estimat pentru citire\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/securitybriefing.net\/cyber-alerts\/cisa-adobe-coldfusion-rce-cve-2026-48282-kev\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/securitybriefing.net\/cyber-alerts\/cisa-adobe-coldfusion-rce-cve-2026-48282-kev\/\"},\"author\":{\"name\":\"C\u00e9sar Daniel Barreto\",\"@id\":\"https:\/\/securitybriefing.net\/#\/schema\/person\/e1c50274ae765e23bb826bbca980e166\"},\"headline\":\"CISA Flags Actively Exploited Adobe ColdFusion RCE (CVE-2026-48282, CVSS 10.0)\",\"datePublished\":\"2026-07-13T18:04:52+00:00\",\"dateModified\":\"2026-07-23T16:58:57+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/securitybriefing.net\/cyber-alerts\/cisa-adobe-coldfusion-rce-cve-2026-48282-kev\/\"},\"wordCount\":314,\"publisher\":{\"@id\":\"https:\/\/securitybriefing.net\/#organization\"},\"articleSection\":[\"cyber alerts\"],\"inLanguage\":\"ro-RO\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/securitybriefing.net\/cyber-alerts\/cisa-adobe-coldfusion-rce-cve-2026-48282-kev\/\",\"url\":\"https:\/\/securitybriefing.net\/cyber-alerts\/cisa-adobe-coldfusion-rce-cve-2026-48282-kev\/\",\"name\":\"CISA Flags Exploited Adobe ColdFusion RCE CVE-2026-48282\",\"isPartOf\":{\"@id\":\"https:\/\/securitybriefing.net\/#website\"},\"datePublished\":\"2026-07-13T18:04:52+00:00\",\"dateModified\":\"2026-07-23T16:58:57+00:00\",\"description\":\"CISA added Adobe ColdFusion flaw CVE-2026-48282 (CVSS 10.0) to its KEV catalog.\",\"breadcrumb\":{\"@id\":\"https:\/\/securitybriefing.net\/cyber-alerts\/cisa-adobe-coldfusion-rce-cve-2026-48282-kev\/#breadcrumb\"},\"inLanguage\":\"ro-RO\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/securitybriefing.net\/cyber-alerts\/cisa-adobe-coldfusion-rce-cve-2026-48282-kev\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/securitybriefing.net\/cyber-alerts\/cisa-adobe-coldfusion-rce-cve-2026-48282-kev\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/securitybriefing.net\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"cyber alerts\",\"item\":\"https:\/\/securitybriefing.net\/cyber-alerts\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"CISA Flags Actively Exploited Adobe ColdFusion RCE (CVE-2026-48282, CVSS 10.0)\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/securitybriefing.net\/#website\",\"url\":\"https:\/\/securitybriefing.net\/\",\"name\":\"Security Briefing\",\"description\":\"Read cybersecurity news, online safety guides, cyber threat updates, and use free security tools from Security Briefing.\",\"publisher\":{\"@id\":\"https:\/\/securitybriefing.net\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/securitybriefing.net\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"ro-RO\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/securitybriefing.net\/#organization\",\"name\":\"Security Briefing\",\"url\":\"https:\/\/securitybriefing.net\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"ro-RO\",\"@id\":\"https:\/\/securitybriefing.net\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/securitybriefing.net\/wp-content\/uploads\/2023\/06\/security-briefing-logo-5.png\",\"contentUrl\":\"https:\/\/securitybriefing.net\/wp-content\/uploads\/2023\/06\/security-briefing-logo-5.png\",\"width\":256,\"height\":70,\"caption\":\"Security Briefing\"},\"image\":{\"@id\":\"https:\/\/securitybriefing.net\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/securitybriefing.net\/#\/schema\/person\/e1c50274ae765e23bb826bbca980e166\",\"name\":\"C\u00e9sar Daniel Barreto\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"ro-RO\",\"@id\":\"https:\/\/securitybriefing.net\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/9e709cab74f02e628ffc32849980d0ea51903be7d4bcb52e99250bac60f0b683?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/9e709cab74f02e628ffc32849980d0ea51903be7d4bcb52e99250bac60f0b683?s=96&d=mm&r=g\",\"caption\":\"C\u00e9sar Daniel Barreto\"},\"description\":\"C\u00e9sar Daniel Barreto is an esteemed cybersecurity writer and expert, known for his in-depth knowledge and ability to simplify complex cyber security topics. With extensive experience in network security and data protection, he regularly contributes insightful articles and analysis on the latest cybersecurity trends, educating both professionals and the public.\",\"url\":\"https:\/\/securitybriefing.net\/ro\/author\/cesarbarreto\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"CISA Flags Exploited Adobe ColdFusion RCE CVE-2026-48282","description":"CISA added Adobe ColdFusion flaw CVE-2026-48282 (CVSS 10.0) to its KEV catalog.","robots":{"index":"noindex","follow":"follow"},"og_locale":"ro_RO","og_type":"article","og_title":"CISA Flags Exploited Adobe ColdFusion RCE CVE-2026-48282","og_description":"CISA added Adobe ColdFusion flaw CVE-2026-48282 (CVSS 10.0) to its KEV catalog.","og_url":"https:\/\/securitybriefing.net\/ro\/alerte-cibernetice\/cisa-adobe-coldfusion-rce-cve-2026-48282-kev\/","og_site_name":"Security Briefing","article_published_time":"2026-07-13T18:04:52+00:00","article_modified_time":"2026-07-23T16:58:57+00:00","og_image":[{"width":1200,"height":300,"url":"https:\/\/securitybriefing.net\/wp-content\/uploads\/2025\/09\/main-logo-black.png","type":"image\/png"}],"author":"C\u00e9sar Daniel Barreto","twitter_card":"summary_large_image","twitter_misc":{"Scris de":"C\u00e9sar Daniel Barreto","Timp estimat pentru citire":"2 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/securitybriefing.net\/cyber-alerts\/cisa-adobe-coldfusion-rce-cve-2026-48282-kev\/#article","isPartOf":{"@id":"https:\/\/securitybriefing.net\/cyber-alerts\/cisa-adobe-coldfusion-rce-cve-2026-48282-kev\/"},"author":{"name":"C\u00e9sar Daniel Barreto","@id":"https:\/\/securitybriefing.net\/#\/schema\/person\/e1c50274ae765e23bb826bbca980e166"},"headline":"CISA Flags Actively Exploited Adobe ColdFusion RCE (CVE-2026-48282, CVSS 10.0)","datePublished":"2026-07-13T18:04:52+00:00","dateModified":"2026-07-23T16:58:57+00:00","mainEntityOfPage":{"@id":"https:\/\/securitybriefing.net\/cyber-alerts\/cisa-adobe-coldfusion-rce-cve-2026-48282-kev\/"},"wordCount":314,"publisher":{"@id":"https:\/\/securitybriefing.net\/#organization"},"articleSection":["cyber alerts"],"inLanguage":"ro-RO"},{"@type":"WebPage","@id":"https:\/\/securitybriefing.net\/cyber-alerts\/cisa-adobe-coldfusion-rce-cve-2026-48282-kev\/","url":"https:\/\/securitybriefing.net\/cyber-alerts\/cisa-adobe-coldfusion-rce-cve-2026-48282-kev\/","name":"CISA Flags Exploited Adobe ColdFusion RCE CVE-2026-48282","isPartOf":{"@id":"https:\/\/securitybriefing.net\/#website"},"datePublished":"2026-07-13T18:04:52+00:00","dateModified":"2026-07-23T16:58:57+00:00","description":"CISA added Adobe ColdFusion flaw CVE-2026-48282 (CVSS 10.0) to its KEV catalog.","breadcrumb":{"@id":"https:\/\/securitybriefing.net\/cyber-alerts\/cisa-adobe-coldfusion-rce-cve-2026-48282-kev\/#breadcrumb"},"inLanguage":"ro-RO","potentialAction":[{"@type":"ReadAction","target":["https:\/\/securitybriefing.net\/cyber-alerts\/cisa-adobe-coldfusion-rce-cve-2026-48282-kev\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/securitybriefing.net\/cyber-alerts\/cisa-adobe-coldfusion-rce-cve-2026-48282-kev\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/securitybriefing.net\/"},{"@type":"ListItem","position":2,"name":"cyber alerts","item":"https:\/\/securitybriefing.net\/cyber-alerts\/"},{"@type":"ListItem","position":3,"name":"CISA Flags Actively Exploited Adobe ColdFusion RCE (CVE-2026-48282, CVSS 10.0)"}]},{"@type":"WebSite","@id":"https:\/\/securitybriefing.net\/#website","url":"https:\/\/securitybriefing.net\/","name":"Informare de Securitate","description":"Citi\u021bi \u0219tiri despre securitatea cibernetic\u0103, ghiduri de siguran\u021b\u0103 online, actualiz\u0103ri privind amenin\u021b\u0103rile cibernetice \u0219i utiliza\u021bi instrumente gratuite de securitate de la Security Briefing.","publisher":{"@id":"https:\/\/securitybriefing.net\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/securitybriefing.net\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"ro-RO"},{"@type":"Organization","@id":"https:\/\/securitybriefing.net\/#organization","name":"Informare de Securitate","url":"https:\/\/securitybriefing.net\/","logo":{"@type":"ImageObject","inLanguage":"ro-RO","@id":"https:\/\/securitybriefing.net\/#\/schema\/logo\/image\/","url":"https:\/\/securitybriefing.net\/wp-content\/uploads\/2023\/06\/security-briefing-logo-5.png","contentUrl":"https:\/\/securitybriefing.net\/wp-content\/uploads\/2023\/06\/security-briefing-logo-5.png","width":256,"height":70,"caption":"Security Briefing"},"image":{"@id":"https:\/\/securitybriefing.net\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/securitybriefing.net\/#\/schema\/person\/e1c50274ae765e23bb826bbca980e166","name":"C\u00e9sar Daniel Barreto","image":{"@type":"ImageObject","inLanguage":"ro-RO","@id":"https:\/\/securitybriefing.net\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/9e709cab74f02e628ffc32849980d0ea51903be7d4bcb52e99250bac60f0b683?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/9e709cab74f02e628ffc32849980d0ea51903be7d4bcb52e99250bac60f0b683?s=96&d=mm&r=g","caption":"C\u00e9sar Daniel Barreto"},"description":"C\u00e9sar Daniel Barreto este un apreciat scriitor \u0219i expert \u00een securitate cibernetic\u0103, cunoscut pentru cuno\u0219tin\u021bele sale aprofundate \u0219i capacitatea de a simplifica subiecte complexe de securitate cibernetic\u0103. Cu o vast\u0103 experien\u021b\u0103 \u00een securitatea re\u021belelor \u0219i protec\u021bia datelor, el contribuie \u00een mod regulat cu articole \u0219i analize p\u0103trunz\u0103toare privind cele mai recente tendin\u021be \u00een materie de securitate cibernetic\u0103, educ\u00e2nd at\u00e2t profesioni\u0219tii, c\u00e2t \u0219i publicul.","url":"https:\/\/securitybriefing.net\/ro\/author\/cesarbarreto\/"}]}},"_links":{"self":[{"href":"https:\/\/securitybriefing.net\/ro\/wp-json\/wp\/v2\/posts\/5957","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/securitybriefing.net\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/securitybriefing.net\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/securitybriefing.net\/ro\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/securitybriefing.net\/ro\/wp-json\/wp\/v2\/comments?post=5957"}],"version-history":[{"count":1,"href":"https:\/\/securitybriefing.net\/ro\/wp-json\/wp\/v2\/posts\/5957\/revisions"}],"predecessor-version":[{"id":6179,"href":"https:\/\/securitybriefing.net\/ro\/wp-json\/wp\/v2\/posts\/5957\/revisions\/6179"}],"wp:attachment":[{"href":"https:\/\/securitybriefing.net\/ro\/wp-json\/wp\/v2\/media?parent=5957"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/securitybriefing.net\/ro\/wp-json\/wp\/v2\/categories?post=5957"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/securitybriefing.net\/ro\/wp-json\/wp\/v2\/tags?post=5957"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}