H3rm1tR3b0rn/CVE-2023-26360-RCE

PoC

Exploit for Remote Code Execution in ColdFusion 2021 (CVE-2023-26360)

view exploit source poc_in_githubauthor H3rm1tR3b0rnpublished 2025-10-28catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2023-26360US	—OT critical	97.3% (100th)	KEV	2023-03-23
Adobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and earlier) are affected by an Improper Access Control vulnerability that could result in arbitrary code…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.