CVE-2026-48376

EUVD-2026-56543
is affected by an Improper Encoding or Escaping of Output vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized write access, causing a limited disruption to availability. Exploitation of this issue does not require user interaction.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.4 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 52.62%
Affected Products (NVD)
VendorProductVersion
adobecoldfusion
2023.0
adobecoldfusion
2023.1
adobecoldfusion
2023.10
adobecoldfusion
2023.11
adobecoldfusion
2023.12
adobecoldfusion
2023.13
adobecoldfusion
2023.14
adobecoldfusion
2023.15
adobecoldfusion
2023.16
adobecoldfusion
2023.17
adobecoldfusion
2023.18
adobecoldfusion
2023.19
adobecoldfusion
2023.2
adobecoldfusion
2023.20
adobecoldfusion
2023.21
adobecoldfusion
2023.22
adobecoldfusion
2023.3
adobecoldfusion
2023.4
adobecoldfusion
2023.5
adobecoldfusion
2023.6
adobecoldfusion
2023.7
adobecoldfusion
2023.8
adobecoldfusion
2023.9
adobecoldfusion
2025.0
adobecoldfusion
2025.1
adobecoldfusion
2025.10
adobecoldfusion
2025.11
adobecoldfusion
2025.2
adobecoldfusion
2025.3
adobecoldfusion
2025.4
adobecoldfusion
2025.5
adobecoldfusion
2025.6
adobecoldfusion
2025.7
adobecoldfusion
2025.8
adobecoldfusion
2025.9
𝑥
= Vulnerable software versions