NLShown in its original language — a full translation is planned for a future version.
Kwetsbaarheden verholpen in Adobe ColdFusion
view advisory published 2026-08-12
Adobe heeft meerdere kwetsbaarheden verholpen in Adobe ColdFusion versies 2025.0.11, 2023.0.22 en eerdere versies.
01
describes (15)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-71385US | high8.4OT elevated | — | ||
ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privilege… | ||||
| CVE-2026-48273US | critical9.9 | — | ||
ColdFusion is affected by an Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') vulnerability that could result in arbitrary code execution in t… | ||||
| CVE-2026-71387US | —OT elevated | — | ||
ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this… | ||||
| CVE-2026-71386US | — | — | ||
is affected by a Cross-site Scripting (XSS) vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerabi… | ||||
| CVE-2026-71384US | —OT elevated | — | ||
is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures an… | ||||
| CVE-2026-71383US | —OT elevated | — | ||
is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures an… | ||||
| CVE-2026-48440US | — | — | ||
ColdFusion is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions… | ||||
| CVE-2026-48386US | —OT elevated | — | ||
ColdFusion is affected by a Use of a Broken or Risky Cryptographic Algorithm vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulner… | ||||
| CVE-2026-48384US | — | — | ||
ColdFusion is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker with high privileges could exploit this vuln… | ||||
| CVE-2026-48376US | — | — | ||
is affected by an Improper Encoding or Escaping of Output vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability… | ||||
| CVE-2026-48375US | —OT elevated | — | ||
ColdFusion is affected by an Incorrect Authorization vulnerability that could result in an application denial-of-service. A low-privileged attacker could exploit this vulnerability… | ||||
| CVE-2026-48362US | — | — | ||
ColdFusion is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbitrary code execution… | ||||
| CVE-2026-34635US | —OT elevated | — | ||
is affected by a Use of Hard-coded Cryptographic Key vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to by… | ||||
| CVE-2026-25652US | —OT elevated | — | ||
is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain unauthorized r… | ||||
| CVE-2026-21279US | — | — | ||
is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures… | ||||
02
references
External citations — patches, advisories, analysis.
- Referenceexternal
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan