coldbraid

CVE-2023-26360 Adobe ColdFusion

Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for remote code execution.

CVSS
not scored

CWE-284

On CISA’s exploited list

Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

Added
2023-03-15
Federal patch deadline
2023-04-05
Ransomware use
not known