EXPOSURES › CVE-2026-47928

CVE-2026-47928

CRITICAL

DETAIL

SourceNVD · cve Published2026-06-09 CVSS9.6 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2026-47928 ↗

▸ RECOMMENDED ACTION Critical severity — schedule patching of the affected products.

PLAYERS IMPLICATED

DESCRIPTION

ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed.

AFFECTED FEDRAMP PRODUCTS · 8

PRODUCT	PROVIDER	STATUS	MATCH
Adobe Acrobat Sign for Government Adobe	Adobe	Authorized	vendor-exact · 0.90
Adobe Analytics Adobe	Adobe	Authorized	vendor-exact · 0.90
Adobe Campaign Adobe	Adobe	Authorized	vendor-exact · 0.90
Adobe Connect Managed Services (ACMS-GC) Adobe	Adobe	Authorized	vendor-exact · 0.90
Adobe Creative Cloud for Enterprise Adobe	Adobe	Authorized	vendor-exact · 0.90
Adobe Document Cloud (PDF Services & Adobe Sign) Adobe	Adobe	Authorized	vendor-exact · 0.90
Adobe Experience Manager Managed Services (AEMMS-GC) Adobe	Adobe	Authorized	vendor-exact · 0.90
Adobe Learning Manager Adobe	Adobe	Authorized	vendor-exact · 0.90