CVE-2023-26359
Adobe ColdFusion Deserialization of Untrusted Data Vulnerability
CVSS
—
No CVSS
EPSS
17.0%
p97
KEV
YES
Aug 21, 2023
Exploit Today
79
0-100
Published: — · Last modified: —
17.0%EPSS · 30 days17.9%
2026-08-022026-08-31
Product
Adobe / ColdFusion
Vulnerability
Adobe ColdFusion Deserialization of Untrusted Data Vulnerability
Added to KEV
Aug 21, 2023
Remediate by
Sep 11, 2023
Known ransomware use
No
Summary description
Adobe ColdFusion contains a deserialization of untrusted data vulnerability that could result in code execution in the context of the current user.
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Notes
https://helpx.adobe.com/security/products/coldfusion/apsb23-25.html; https://nvd.nist.gov/vuln/detail/CVE-2023-26359
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-4828210.0 CRI98.6%
KEV—80Adobe ColdFusion Path Traversal Vulnerability4dCVE-2010-28619.8 CRI100.0%
KEV—80Adobe ColdFusion Directory Traversal Vulnerability17dCVE-2023-29300—100.0%
KEV—80Adobe ColdFusion Deserialization of Untrusted Data Vulnerability—CVE-2023-29298—100.0%
KEV—80Adobe ColdFusion Improper Access Control Vulnerability—CVE-2023-38205—100.0%
KEV—80Adobe ColdFusion Improper Access Control Vulnerability—CVE-2018-15961—100.0%
KEV—80Adobe ColdFusion Unrestricted File Upload Vulnerability—