vulnti.work

ColdFusion is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacke…

High CVSS 8.1
CVECVE-2026-48440
First seen2026-08-12 07:16 UTC
Disclosed2026-08-11 17:18 UTC
Last updated2026-08-12 07:16 UTC
Channel statusauto

Summary

ColdFusion is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction.

In-depth triage

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Sources

  • NVD DATABASE

Original Links

Timeline

  1. nvd_ingest NVD