CVE-2026-48386

EUVD-2026-56540
ColdFusion is affected by a Use of a Broken or Risky Cryptographic Algorithm vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue does not require user interaction.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 61.84%
Affected Products (NVD)
VendorProductVersion
adobecoldfusion
2023.0
adobecoldfusion
2023.1
adobecoldfusion
2023.10
adobecoldfusion
2023.11
adobecoldfusion
2023.12
adobecoldfusion
2023.13
adobecoldfusion
2023.14
adobecoldfusion
2023.15
adobecoldfusion
2023.16
adobecoldfusion
2023.17
adobecoldfusion
2023.18
adobecoldfusion
2023.19
adobecoldfusion
2023.2
adobecoldfusion
2023.20
adobecoldfusion
2023.21
adobecoldfusion
2023.22
adobecoldfusion
2023.3
adobecoldfusion
2023.4
adobecoldfusion
2023.5
adobecoldfusion
2023.6
adobecoldfusion
2023.7
adobecoldfusion
2023.8
adobecoldfusion
2023.9
adobecoldfusion
2025.0
adobecoldfusion
2025.1
adobecoldfusion
2025.10
adobecoldfusion
2025.11
adobecoldfusion
2025.2
adobecoldfusion
2025.3
adobecoldfusion
2025.4
adobecoldfusion
2025.5
adobecoldfusion
2025.6
adobecoldfusion
2025.7
adobecoldfusion
2025.8
adobecoldfusion
2025.9
𝑥
= Vulnerable software versions