{"id":5957,"date":"2026-07-13T18:04:52","date_gmt":"2026-07-13T18:04:52","guid":{"rendered":"https:\/\/securitybriefing.net\/?p=5957"},"modified":"2026-07-23T16:58:57","modified_gmt":"2026-07-23T16:58:57","slug":"cisa-adobe-coldfusion-rce-cve-2026-48282-kev","status":"publish","type":"post","link":"https:\/\/securitybriefing.net\/sv\/cyber-varningar\/cisa-adobe-coldfusion-rce-cve-2026-48282-kev\/","title":{"rendered":"CISA Flags Actively Exploited Adobe ColdFusion RCE (CVE-2026-48282, CVSS 10.0)"},"content":{"rendered":"<p>On July 7, 2026, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a maximum-severity Adobe ColdFusion vulnerability to its <a href=\"https:\/\/www.cisa.gov\/known-exploited-vulnerabilities-catalog\" target=\"_blank\" rel=\"noopener\">Known Exploited Vulnerabilities (KEV) catalog<\/a>, warning that it is being exploited in the wild. Tracked as <strong><a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-48282\" target=\"_blank\" rel=\"noopener\">CVE-2026-48282<\/a><\/strong> and rated CVSS 10.0, the flaw lets an unauthenticated attacker achieve remote code execution &mdash; and federal agencies were given only until July 10 to patch under Binding Operational Directive 26-04.<\/p>\n<h2>Path traversal in the RDS handler, leading to unauthenticated RCE<\/h2>\n<p>CVE-2026-48282 is an improper path-limitation flaw (CWE-22) in ColdFusion&#8217;s Remote Development Services (RDS) FILEIO handler. Because the handler fails to properly validate paths, an unauthenticated attacker can write arbitrary files anywhere on the server&#8217;s file system &mdash; including the web root. Dropping a malicious file into a web-accessible directory turns that file-write into full, unauthenticated remote code execution. No login and no user interaction are required, which is exactly why it earns a perfect 10.0.<\/p>\n<h2>Patched June 30, exploited by July 7<\/h2>\n<p>Adobe shipped fixes on June 30, 2026 for the ColdFusion 2023 and 2025 release lines. One week later, CISA confirmed active exploitation and added the CVE to KEV with a three-day remediation deadline. That compressed timeline is a signal in itself &mdash; CISA reserves the tightest windows for bugs being weaponized right now. ColdFusion also has a long history of being targeted: its RCE flaws are a recurring favorite of ransomware operators and initial-access brokers.<\/p>\n<h2>What to do now<\/h2>\n<p>If you run Adobe ColdFusion 2023 or 2025, apply the June 30 security updates immediately. Beyond patching, Remote Development Services should never be exposed to the internet: disable RDS in production if it is not needed, and restrict access to ColdFusion administration interfaces. Because exploitation is unauthenticated and leads directly to code execution, treat any internet-facing ColdFusion server that stayed unpatched after June 30 as potentially compromised, and hunt for unexpected files in web-accessible directories.<\/p>","protected":false},"excerpt":{"rendered":"<p>CISA added the actively exploited Adobe ColdFusion RDS path-traversal flaw CVE-2026-48282 (CVSS 10.0) to its KEV catalog, enabling unauthenticated RCE.<\/p>","protected":false},"author":3,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[40],"tags":[],"class_list":["post-5957","post","type-post","status-publish","format-standard","hentry","category-cyber-alerts","entry"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v26.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>CISA Flags Exploited Adobe ColdFusion RCE CVE-2026-48282<\/title>\n<meta name=\"description\" content=\"CISA added Adobe ColdFusion flaw CVE-2026-48282 (CVSS 10.0) to its KEV catalog.\" \/>\n<meta name=\"robots\" content=\"noindex, follow\" \/>\n<meta property=\"og:locale\" content=\"sv_SE\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"CISA Flags Exploited Adobe ColdFusion RCE CVE-2026-48282\" \/>\n<meta property=\"og:description\" content=\"CISA added Adobe ColdFusion flaw CVE-2026-48282 (CVSS 10.0) to its KEV catalog.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/securitybriefing.net\/sv\/cyber-varningar\/cisa-adobe-coldfusion-rce-cve-2026-48282-kev\/\" \/>\n<meta property=\"og:site_name\" content=\"Security Briefing\" \/>\n<meta property=\"article:published_time\" content=\"2026-07-13T18:04:52+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-07-23T16:58:57+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/securitybriefing.net\/wp-content\/uploads\/2025\/09\/main-logo-black.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"300\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"C\u00e9sar Daniel Barreto\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Skriven av\" \/>\n\t<meta name=\"twitter:data1\" content=\"C\u00e9sar Daniel Barreto\" \/>\n\t<meta name=\"twitter:label2\" content=\"Ber\u00e4knad l\u00e4stid\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minuter\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/securitybriefing.net\/cyber-alerts\/cisa-adobe-coldfusion-rce-cve-2026-48282-kev\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/securitybriefing.net\/cyber-alerts\/cisa-adobe-coldfusion-rce-cve-2026-48282-kev\/\"},\"author\":{\"name\":\"C\u00e9sar Daniel Barreto\",\"@id\":\"https:\/\/securitybriefing.net\/#\/schema\/person\/e1c50274ae765e23bb826bbca980e166\"},\"headline\":\"CISA Flags Actively Exploited Adobe ColdFusion RCE (CVE-2026-48282, CVSS 10.0)\",\"datePublished\":\"2026-07-13T18:04:52+00:00\",\"dateModified\":\"2026-07-23T16:58:57+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/securitybriefing.net\/cyber-alerts\/cisa-adobe-coldfusion-rce-cve-2026-48282-kev\/\"},\"wordCount\":314,\"publisher\":{\"@id\":\"https:\/\/securitybriefing.net\/#organization\"},\"articleSection\":[\"cyber alerts\"],\"inLanguage\":\"sv-SE\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/securitybriefing.net\/cyber-alerts\/cisa-adobe-coldfusion-rce-cve-2026-48282-kev\/\",\"url\":\"https:\/\/securitybriefing.net\/cyber-alerts\/cisa-adobe-coldfusion-rce-cve-2026-48282-kev\/\",\"name\":\"CISA Flags Exploited Adobe ColdFusion RCE CVE-2026-48282\",\"isPartOf\":{\"@id\":\"https:\/\/securitybriefing.net\/#website\"},\"datePublished\":\"2026-07-13T18:04:52+00:00\",\"dateModified\":\"2026-07-23T16:58:57+00:00\",\"description\":\"CISA added Adobe ColdFusion flaw CVE-2026-48282 (CVSS 10.0) to its KEV catalog.\",\"breadcrumb\":{\"@id\":\"https:\/\/securitybriefing.net\/cyber-alerts\/cisa-adobe-coldfusion-rce-cve-2026-48282-kev\/#breadcrumb\"},\"inLanguage\":\"sv-SE\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/securitybriefing.net\/cyber-alerts\/cisa-adobe-coldfusion-rce-cve-2026-48282-kev\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/securitybriefing.net\/cyber-alerts\/cisa-adobe-coldfusion-rce-cve-2026-48282-kev\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/securitybriefing.net\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"cyber alerts\",\"item\":\"https:\/\/securitybriefing.net\/cyber-alerts\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"CISA Flags Actively Exploited Adobe ColdFusion RCE (CVE-2026-48282, CVSS 10.0)\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/securitybriefing.net\/#website\",\"url\":\"https:\/\/securitybriefing.net\/\",\"name\":\"Security Briefing\",\"description\":\"Read cybersecurity news, online safety guides, cyber threat updates, and use free security tools from Security Briefing.\",\"publisher\":{\"@id\":\"https:\/\/securitybriefing.net\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/securitybriefing.net\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"sv-SE\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/securitybriefing.net\/#organization\",\"name\":\"Security Briefing\",\"url\":\"https:\/\/securitybriefing.net\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"sv-SE\",\"@id\":\"https:\/\/securitybriefing.net\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/securitybriefing.net\/wp-content\/uploads\/2023\/06\/security-briefing-logo-5.png\",\"contentUrl\":\"https:\/\/securitybriefing.net\/wp-content\/uploads\/2023\/06\/security-briefing-logo-5.png\",\"width\":256,\"height\":70,\"caption\":\"Security Briefing\"},\"image\":{\"@id\":\"https:\/\/securitybriefing.net\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/securitybriefing.net\/#\/schema\/person\/e1c50274ae765e23bb826bbca980e166\",\"name\":\"C\u00e9sar Daniel Barreto\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"sv-SE\",\"@id\":\"https:\/\/securitybriefing.net\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/9e709cab74f02e628ffc32849980d0ea51903be7d4bcb52e99250bac60f0b683?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/9e709cab74f02e628ffc32849980d0ea51903be7d4bcb52e99250bac60f0b683?s=96&d=mm&r=g\",\"caption\":\"C\u00e9sar Daniel Barreto\"},\"description\":\"C\u00e9sar Daniel Barreto is an esteemed cybersecurity writer and expert, known for his in-depth knowledge and ability to simplify complex cyber security topics. With extensive experience in network security and data protection, he regularly contributes insightful articles and analysis on the latest cybersecurity trends, educating both professionals and the public.\",\"url\":\"https:\/\/securitybriefing.net\/sv\/author\/cesarbarreto\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"CISA Flags Exploited Adobe ColdFusion RCE CVE-2026-48282","description":"CISA added Adobe ColdFusion flaw CVE-2026-48282 (CVSS 10.0) to its KEV catalog.","robots":{"index":"noindex","follow":"follow"},"og_locale":"sv_SE","og_type":"article","og_title":"CISA Flags Exploited Adobe ColdFusion RCE CVE-2026-48282","og_description":"CISA added Adobe ColdFusion flaw CVE-2026-48282 (CVSS 10.0) to its KEV catalog.","og_url":"https:\/\/securitybriefing.net\/sv\/cyber-varningar\/cisa-adobe-coldfusion-rce-cve-2026-48282-kev\/","og_site_name":"Security Briefing","article_published_time":"2026-07-13T18:04:52+00:00","article_modified_time":"2026-07-23T16:58:57+00:00","og_image":[{"width":1200,"height":300,"url":"https:\/\/securitybriefing.net\/wp-content\/uploads\/2025\/09\/main-logo-black.png","type":"image\/png"}],"author":"C\u00e9sar Daniel Barreto","twitter_card":"summary_large_image","twitter_misc":{"Skriven av":"C\u00e9sar Daniel Barreto","Ber\u00e4knad l\u00e4stid":"2 minuter"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/securitybriefing.net\/cyber-alerts\/cisa-adobe-coldfusion-rce-cve-2026-48282-kev\/#article","isPartOf":{"@id":"https:\/\/securitybriefing.net\/cyber-alerts\/cisa-adobe-coldfusion-rce-cve-2026-48282-kev\/"},"author":{"name":"C\u00e9sar Daniel Barreto","@id":"https:\/\/securitybriefing.net\/#\/schema\/person\/e1c50274ae765e23bb826bbca980e166"},"headline":"CISA Flags Actively Exploited Adobe ColdFusion RCE (CVE-2026-48282, CVSS 10.0)","datePublished":"2026-07-13T18:04:52+00:00","dateModified":"2026-07-23T16:58:57+00:00","mainEntityOfPage":{"@id":"https:\/\/securitybriefing.net\/cyber-alerts\/cisa-adobe-coldfusion-rce-cve-2026-48282-kev\/"},"wordCount":314,"publisher":{"@id":"https:\/\/securitybriefing.net\/#organization"},"articleSection":["cyber alerts"],"inLanguage":"sv-SE"},{"@type":"WebPage","@id":"https:\/\/securitybriefing.net\/cyber-alerts\/cisa-adobe-coldfusion-rce-cve-2026-48282-kev\/","url":"https:\/\/securitybriefing.net\/cyber-alerts\/cisa-adobe-coldfusion-rce-cve-2026-48282-kev\/","name":"CISA Flags Exploited Adobe ColdFusion RCE CVE-2026-48282","isPartOf":{"@id":"https:\/\/securitybriefing.net\/#website"},"datePublished":"2026-07-13T18:04:52+00:00","dateModified":"2026-07-23T16:58:57+00:00","description":"CISA added Adobe ColdFusion flaw CVE-2026-48282 (CVSS 10.0) to its KEV catalog.","breadcrumb":{"@id":"https:\/\/securitybriefing.net\/cyber-alerts\/cisa-adobe-coldfusion-rce-cve-2026-48282-kev\/#breadcrumb"},"inLanguage":"sv-SE","potentialAction":[{"@type":"ReadAction","target":["https:\/\/securitybriefing.net\/cyber-alerts\/cisa-adobe-coldfusion-rce-cve-2026-48282-kev\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/securitybriefing.net\/cyber-alerts\/cisa-adobe-coldfusion-rce-cve-2026-48282-kev\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/securitybriefing.net\/"},{"@type":"ListItem","position":2,"name":"cyber alerts","item":"https:\/\/securitybriefing.net\/cyber-alerts\/"},{"@type":"ListItem","position":3,"name":"CISA Flags Actively Exploited Adobe ColdFusion RCE (CVE-2026-48282, CVSS 10.0)"}]},{"@type":"WebSite","@id":"https:\/\/securitybriefing.net\/#website","url":"https:\/\/securitybriefing.net\/","name":"S\u00e4kerhetsgenomg\u00e5ng","description":"L\u00e4s cybers\u00e4kerhetsnyheter, onlines\u00e4kerhetsguider, cyberhotuppdateringar och anv\u00e4nd gratis s\u00e4kerhetsverktyg fr\u00e5n Security Briefing.","publisher":{"@id":"https:\/\/securitybriefing.net\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/securitybriefing.net\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"sv-SE"},{"@type":"Organization","@id":"https:\/\/securitybriefing.net\/#organization","name":"S\u00e4kerhetsgenomg\u00e5ng","url":"https:\/\/securitybriefing.net\/","logo":{"@type":"ImageObject","inLanguage":"sv-SE","@id":"https:\/\/securitybriefing.net\/#\/schema\/logo\/image\/","url":"https:\/\/securitybriefing.net\/wp-content\/uploads\/2023\/06\/security-briefing-logo-5.png","contentUrl":"https:\/\/securitybriefing.net\/wp-content\/uploads\/2023\/06\/security-briefing-logo-5.png","width":256,"height":70,"caption":"Security Briefing"},"image":{"@id":"https:\/\/securitybriefing.net\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/securitybriefing.net\/#\/schema\/person\/e1c50274ae765e23bb826bbca980e166","name":"C\u00e9sar Daniel Barreto","image":{"@type":"ImageObject","inLanguage":"sv-SE","@id":"https:\/\/securitybriefing.net\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/9e709cab74f02e628ffc32849980d0ea51903be7d4bcb52e99250bac60f0b683?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/9e709cab74f02e628ffc32849980d0ea51903be7d4bcb52e99250bac60f0b683?s=96&d=mm&r=g","caption":"C\u00e9sar Daniel Barreto"},"description":"C\u00e9sar Daniel Barreto \u00e4r en uppskattad cybers\u00e4kerhetsskribent och expert, k\u00e4nd f\u00f6r sin djupg\u00e5ende kunskap och f\u00f6rm\u00e5ga att f\u00f6renkla komplexa cybers\u00e4kerhets\u00e4mnen. Han har l\u00e5ng erfarenhet av n\u00e4tverkss\u00e4kerhet och dataskydd och bidrar regelbundet med insiktsfulla artiklar och analyser om de senaste trenderna inom cybers\u00e4kerhet, som utbildar b\u00e5de yrkesverksamma och allm\u00e4nheten.","url":"https:\/\/securitybriefing.net\/sv\/author\/cesarbarreto\/"}]}},"_links":{"self":[{"href":"https:\/\/securitybriefing.net\/sv\/wp-json\/wp\/v2\/posts\/5957","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/securitybriefing.net\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/securitybriefing.net\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/securitybriefing.net\/sv\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/securitybriefing.net\/sv\/wp-json\/wp\/v2\/comments?post=5957"}],"version-history":[{"count":1,"href":"https:\/\/securitybriefing.net\/sv\/wp-json\/wp\/v2\/posts\/5957\/revisions"}],"predecessor-version":[{"id":6179,"href":"https:\/\/securitybriefing.net\/sv\/wp-json\/wp\/v2\/posts\/5957\/revisions\/6179"}],"wp:attachment":[{"href":"https:\/\/securitybriefing.net\/sv\/wp-json\/wp\/v2\/media?parent=5957"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/securitybriefing.net\/sv\/wp-json\/wp\/v2\/categories?post=5957"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/securitybriefing.net\/sv\/wp-json\/wp\/v2\/tags?post=5957"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}