Is CVE-2026-48320 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-48320?

CVE-2026-48320 has a CVSS v3 severity of HIGH (8.5).

Back

CVE-2026-48320

Description

ColdFusion is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.