Adobe Product Family: June 2026 Regular Security Update Advisory
Overview
Adobe has released security updates to address vulnerabilities in its products. The affected products are ColdFusion 2025 Update 9 and earlier versions, ColdFusion 2023 20 and earlier versions, and Adobe Campaign Classic acc v7 7.4.3 Build 9396 and earlier versions.
Vulnerabilities Addressed in ColdFusion
As follows, the following vulnerabilities have been patched in ColdFusion 2025:
- Arbitrary code execution vulnerabilities caused by unrestricted file uploads of sensitive file types (CVE-2026-48276, CVE-2026-48283).
- Arbitrary code execution vulnerabilities caused by improper input validation (CVE-2026-48277, CVE-2026-48281, CVE-2026-48316).
- Arbitrary code execution vulnerability caused by improper restrictions on path names for restricted directories(path traversal, an issue where files outside the restricted path can be accessed), leading to an arbitrary code execution vulnerability (CVE-2026-48282) and an arbitrary file system read vulnerability (CVE-2026-48313).
- A privilege escalation vulnerability (CVE-2026-48315) caused by improper input validation.
- An arbitrary code execution vulnerability (CVE-2026-48307) caused by cross-site scripting (reflected XSS, where malicious scripts are reflected and executed on a web page).
- Security feature bypass vulnerability caused by SSRF (Server-Side Request Forgery, a condition where a server is tricked into sending internal or external requests on behalf of the attacker) (CVE-2026-48285).
- A privilege escalation vulnerability (CVE-2026-48314) caused by improper restrictions on path names for restricted directories.
Vulnerabilities Resolved in Adobe Campaign Classic
In Adobe Campaign Classic, an arbitrary code execution vulnerability (CVE-2026-48286) caused by incorrect authentication has been resolved.
Patches Provided
The following patches were provided via the June 30, 2026, update:
- ColdFusion 2025 Update 10.
- ColdFusion 2023 Update 21.
- Adobe Campaign Classic acc v7 7.4.3 Build 9397.
Note
Adobe recommends updating to the latest version.
