CVE-2026-48332 is a Server-Side Request Forgery (SSRF) vulnerability in Adobe ColdFusion 2025. It enables a low-privileged attacker to bypass security controls and obtain unauthorized read access. The vulnerability does not require user interaction and affects the security scope of the application. The CVSS 3.1 base score is 7.7, indicating high severity, with network attack vector, low attack complexity, and no user interaction required. No vendor advisory or patch information is currently available.

An attacker with low privileges can exploit this SSRF vulnerability to bypass security features and gain unauthorized read access to resources. This could lead to exposure of sensitive information. The vulnerability does not impact integrity or availability but compromises confidentiality. Exploitation does not require user interaction and changes the security scope, increasing the risk of unauthorized data access.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, monitor Adobe's security advisories for updates. No specific mitigations or workarounds are provided at this time.