TI-2026-73594 CVE-2026-105897 · GHSA-qx52-x4j2-f7jr
Server-side request forgery in Adobe ColdFusion
Priority MEDIUM 46
ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation.
Vulnerabilities
296 records
TI-2026-73607 CVE-2026-106616 · GHSA-r8wq-xrjj-rvh4
XXE in Adobe ColdFusion lets attackers read arbitrary files
Priority MEDIUM 44
ColdFusion is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could lead to arbitrary file system read.
TI-2026-73465 CVE-2026-34633 · GHSA-7428-c27w-fq3f
Server-side request forgery in Adobe ColdFusion
Priority LOW 36
ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation.
TI-2026-73609 CVE-2026-106618 · GHSA-38qj-9jq8-ppj6
Incorrect authorization in Adobe ColdFusion allows code execution
Priority LOW 39
ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.
TI-2026-73600 CVE-2026-105994 · GHSA-g55m-fxqp-rjrj
Incorrect authorization in Adobe ColdFusion lets attackers write data
Priority LOW 34
ColdFusion is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass.
TI-2026-73613 CVE-2026-106622 · GHSA-g6h4-j5vh-j666
SSRF in Adobe ColdFusion could lead to privilege escalation
Priority MEDIUM 50
ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation.
TI-2026-73610 CVE-2026-106619 · GHSA-vxrm-24wp-m7x7
Improper input validation in Adobe ColdFusion allows code execution
Priority MEDIUM 42
ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user.
TI-2026-73601 CVE-2026-106089 · GHSA-6cmf-m7fc-pwgr
Incorrect authorization in Adobe ColdFusion enables code execution
Priority LOW 39
ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.
TI-2026-73604 CVE-2026-106613 · GHSA-35fq-4gw4-ph4p
ColdFusion Improper Input Validation Allows Code Execution
Priority MEDIUM 42
ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user.
TI-2026-73605 CVE-2026-106614 · GHSA-r995-2gwx-mwcw
Incorrect authorization in Adobe ColdFusion allows code execution
Priority LOW 35
ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.
TI-2026-73615 CVE-2026-106624 · GHSA-5pvv-hp6h-6688
Code injection in Adobe ColdFusion lets attackers run arbitrary code
Priority MEDIUM 51
ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user.
TI-2026-73503 CVE-2026-75996 · GHSA-48pv-77qw-wrfw
Uncontrolled resource consumption in Adobe ColdFusion
Priority MEDIUM 40
ColdFusion is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service.
TI-2026-73612 CVE-2026-106621 · GHSA-fg7m-h434-wj6q
Code injection in Adobe ColdFusion allows arbitrary code execution
Priority MEDIUM 49
ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user.
TI-2026-73595 CVE-2026-105898 · GHSA-f83p-c5rm-c287
Incorrect authorization in Adobe ColdFusion allows code execution
Priority LOW 37
ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.
TI-2026-73599 CVE-2026-105903 · GHSA-p5x2-3mcq-2693
Code injection in Adobe ColdFusion allows arbitrary code execution
Priority MEDIUM 44
ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user.
TI-2026-73501 CVE-2026-75994 · GHSA-9jvm-5xvg-48pq
Incorrect authorization in Adobe ColdFusion allows code execution
Priority MEDIUM 43
ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.
TI-2026-73602 CVE-2026-106090 · GHSA-jxxq-49v4-wfp2
Incorrect authorization in Adobe ColdFusion allows code execution
Priority LOW 39
ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.
TI-2026-73466 CVE-2026-34634 · GHSA-xp46-fjjc-845v
Server-side request forgery in Adobe ColdFusion
Priority MEDIUM 46
ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation.
TI-2026-73611 CVE-2026-106620 · GHSA-43c2-f7hx-jrx6
ColdFusion Incorrect Authorization allows security feature bypass
Priority MEDIUM 43
ColdFusion is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass.
TI-2026-73504 CVE-2026-76001 · GHSA-f85c-9hh8-hmwh
Server-side request forgery in Adobe ColdFusion
Priority LOW 34
ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation.
TI-2026-73603 CVE-2026-106612 · GHSA-79g8-cm5f-mjxw
Incorrect authorization in Adobe ColdFusion enables code execution
Priority MEDIUM 43
ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.
TI-2026-73606 CVE-2026-106615 · GHSA-6m6q-c9rg-ccq7
Incorrect authorization in Adobe ColdFusion enables code execution
Priority LOW 39
ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.
TI-2026-73502 CVE-2026-75995 · GHSA-9w55-wmp5-8p4c
Improper input validation in Adobe ColdFusion allows code execution
Priority LOW 38
ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user.
TI-2026-73500 CVE-2026-75748 · GHSA-9p82-5qfv-qq3m
Server-side request forgery in Adobe ColdFusion
Priority LOW 35
ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation.
TI-2026-73597 CVE-2026-105900 · GHSA-24gc-q93c-9xjp
Input validation flaw in Adobe ColdFusion enables denial of service
Priority MEDIUM 40
ColdFusion is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service.