PULSEUnderground Intel

LIVE38signals / 24h

FEED

ransomn0n reclama a Company #75 · US · Not Foundransomn0n reclama a Company #74 · US · Not Foundransomn0n reclama a Evolution Spine / All Labs · Healthcareransomincransom reclama a fairfeelegalservices.com · US · Professional Servicesransomincransom reclama a verveba.com \ www.att.com · US · Technologyransomincransom reclama a www.coopecaja.fi.cr · CR · Financial Servicesransomincransom reclama a nowaszkola.com · PL · Educationransomqilin reclama a Keio Corporation · JP · Transportationransomqilin reclama a Kemlows Diecasting Products Limited · GB · Manufacturingransomqilin reclama a Telcoe Federal Credit Union · US · Financial Servicesransomwallstreet reclama a TGM Manufacturing, Inc · US · Manufacturingransomqilin reclama a Segres Systec · ES · Technologyransomqilin reclama a Shield Wall Systems of Florida · US · Government & Defenseransomqilin reclama a The Excalibur Group · US · Otherransomn0n reclama a Company #75 · US · Not Foundransomn0n reclama a Company #74 · US · Not Foundransomn0n reclama a Evolution Spine / All Labs · Healthcareransomincransom reclama a fairfeelegalservices.com · US · Professional Servicesransomincransom reclama a verveba.com \ www.att.com · US · Technologyransomincransom reclama a www.coopecaja.fi.cr · CR · Financial Servicesransomincransom reclama a nowaszkola.com · PL · Educationransomqilin reclama a Keio Corporation · JP · Transportationransomqilin reclama a Kemlows Diecasting Products Limited · GB · Manufacturingransomqilin reclama a Telcoe Federal Credit Union · US · Financial Servicesransomwallstreet reclama a TGM Manufacturing, Inc · US · Manufacturingransomqilin reclama a Segres Systec · ES · Technologyransomqilin reclama a Shield Wall Systems of Florida · US · Government & Defenseransomqilin reclama a The Excalibur Group · US · Other

CVE Watch—

CVE-2023-26359

Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

CVSS

—

No CVSS

EPSS

17.0%

p97

KEV

YES

Aug 21, 2023

Exploit Today

79

0-100

Published: — · Last modified: —

EPSS · 30d

17.0%EPSS · 30 days17.0%

2026-09-172026-10-15

KEV catalog record

Product

Adobe / ColdFusion

Vulnerability

Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

Added to KEV

Aug 21, 2023

Remediate by

Sep 11, 2023

Known ransomware use

No

Summary description

Adobe ColdFusion contains a deserialization of untrusted data vulnerability that could result in code execution in the context of the current user.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes

https://helpx.adobe.com/security/products/coldfusion/apsb23-25.html; https://nvd.nist.gov/vuln/detail/CVE-2023-26359

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-4828210.0 CRI

KEV—80Adobe ColdFusion Path Traversal Vulnerability9d CVE-2010-28619.8 CRI

KEV—80Adobe ColdFusion Directory Traversal Vulnerability14d CVE-2023-29300—

KEV—80Adobe ColdFusion Deserialization of Untrusted Data Vulnerability—CVE-2023-29298—

KEV—80Adobe ColdFusion Improper Access Control Vulnerability—CVE-2023-38205—

KEV—80Adobe ColdFusion Improper Access Control Vulnerability—CVE-2018-15961—

KEV—80Adobe ColdFusion Unrestricted File Upload Vulnerability—