PULSE
FEED
← Todos os CVEs
CVE Watch—

CVE-2023-26360

Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

CVSS

—

Sem CVSS

EPSS

97.3%

p100

KEV

SIM

15 de mar. de 2023

Exploit Today

80

0-100

Publicado: — · Última mod.: —

EPSS · 30d
97.3%EPSS · 30 dias97.3%
2026-10-082026-11-05
Ficha do catálogo KEV

Produto

Adobe / ColdFusion

Vulnerabilidade

Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

Adicionado ao KEV

15 de mar. de 2023

Corrigir até

5 de abr. de 2023

Uso conhecido em ransomware

Não

Descrição resumida

Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for remote code execution.

Ação necessária

Apply updates per vendor instructions.

Notas

https://helpx.adobe.com/security/products/coldfusion/apsb23-25.html; https://nvd.nist.gov/vuln/detail/CVE-2023-26360

CVEs relacionados
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-4828210.0 CRÍ
98.7%
KEV—80Adobe ColdFusion Path Traversal Vulnerability11d
CVE-2010-28619.8 CRÍ
100.0%
KEV—80Adobe ColdFusion Directory Traversal Vulnerability34d
CVE-2023-29300—
100.0%
KEV—80Adobe ColdFusion Deserialization of Untrusted Data Vulnerability—
CVE-2018-15961—
100.0%
KEV—80Adobe ColdFusion Unrestricted File Upload Vulnerability—
CVE-2023-29298—
100.0%
KEV—80Adobe ColdFusion Improper Access Control Vulnerability—
CVE-2023-38205—
100.0%
KEV—80Adobe ColdFusion Improper Access Control Vulnerability—