CVE-2026-48313 Scanner
CVE-2026-48313 Scanner - Path Traversal vulnerability in ColdFusion
Used 2k times · 4.2k assets checked · domain, subdomain, ipv4
CVE
CVE-2026-48313
9.3
CVSScritical
Exploitable remotely over the internet · no authentication required.
Description
ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read and limited write access. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction. Scope is changed.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
coldfusion 2025coldfusion 2023
Updated Nov 6, 2026View on NVD →
S4E scanner
CVE history: coldfusion 2025
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →