Firetruck

CVE-2023-26360

KEV
Updated Oct 21, 2025 · PUBLISHED
View KEV entry →

Description

Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for remote code execution.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
ColdFusionAdobe / ColdFusion>= unspecified, <= CF2018U15affected
ColdFusionAdobe / ColdFusion>= unspecified, <= CF2021U5affected
ColdFusionAdobe / ColdFusion>= unspecified, <= Noneaffected