coldbraid

CVE-2023-26359 Adobe ColdFusion

Adobe ColdFusion contains a deserialization of untrusted data vulnerability that could result in code execution in the context of the current user.

CVSS
not scored

CWE-502

On CISA’s exploited list

Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

Added
2023-08-21
Federal patch deadline
2023-09-11
Ransomware use
not known