PULSE
FEED
← Todos os CVEs
CVE Watch—

CVE-2023-26359

Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

CVSS

—

Sem CVSS

EPSS

17.0%

p97

KEV

SIM

21 de ago. de 2023

Exploit Today

79

0-100

Publicado: — · Última mod.: —

EPSS · 30d
17.0%EPSS · 30 dias17.0%
2026-10-082026-11-05
Ficha do catálogo KEV

Produto

Adobe / ColdFusion

Vulnerabilidade

Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

Adicionado ao KEV

21 de ago. de 2023

Corrigir até

11 de set. de 2023

Uso conhecido em ransomware

Não

Descrição resumida

Adobe ColdFusion contains a deserialization of untrusted data vulnerability that could result in code execution in the context of the current user.

Ação necessária

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://helpx.adobe.com/security/products/coldfusion/apsb23-25.html; https://nvd.nist.gov/vuln/detail/CVE-2023-26359

CVEs relacionados
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-4828210.0 CRÍ
98.7%
KEV—80Adobe ColdFusion Path Traversal Vulnerability11d
CVE-2010-28619.8 CRÍ
100.0%
KEV—80Adobe ColdFusion Directory Traversal Vulnerability34d
CVE-2023-29300—
100.0%
KEV—80Adobe ColdFusion Deserialization of Untrusted Data Vulnerability—
CVE-2023-29298—
100.0%
KEV—80Adobe ColdFusion Improper Access Control Vulnerability—
CVE-2018-15961—
100.0%
KEV—80Adobe ColdFusion Unrestricted File Upload Vulnerability—
CVE-2023-38205—
100.0%
KEV—80Adobe ColdFusion Improper Access Control Vulnerability—