Adobe has released security patches addressing multiple critical vulnerabilities across ColdFusion, Commerce, and Campaign Classic products. The most severe flaw, CVE-2026-48362 in ColdFusion, carries a maximum CVSS score of 10.0 and involves operating system command injection that could enable arbitrary code execution and privilege escalation.
Adobe has shipped updates to address multiple critical security vulnerabilities impacting ColdFusion, Commerce, and Campaign Classic that, if successfully exploited, could result in arbitrary code execution and privilege escalation. The most severe of the flaws are listed below - CVE-2026-48362 (CVSS score: 10.0) - An operating system command injection vulnerability in ColdFusion that could
Originally published at thehackernews.com
60-minute technical evaluation, no obligation. We'll map the ideas in this article to your environment.
