Adobe ColdFusion Schwachstellen (CVE)

Für Adobe ColdFusion veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

160 Ergebnisse
7.7Hoch
CVE-2026-34633

ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)

Adobe ColdFusion 2025; Adobe ColdFusion 2023

ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does n…

8.8Hoch
CVE-2026-106618

ColdFusion | Incorrect Authorization (CWE-863)

Adobe ColdFusion 2025; Adobe ColdFusion 2023

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this iss…

7.7Hoch
CVE-2026-105994

ColdFusion | Incorrect Authorization (CWE-863)

Adobe ColdFusion 2025; Adobe ColdFusion 2023

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this…

9.0Kritisch
CVE-2026-106619

ColdFusion | Improper Input Validation (CWE-20)

Adobe ColdFusion 2025; Adobe ColdFusion 2023

ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploit depends on conditions beyond…

8.8Hoch
CVE-2026-106089

ColdFusion | Incorrect Authorization (CWE-863)

Adobe ColdFusion 2025; Adobe ColdFusion 2023

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this iss…

8.8Hoch
CVE-2026-106613

ColdFusion | Improper Input Validation (CWE-20)

Adobe ColdFusion 2025; Adobe ColdFusion 2023

ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this i…

7.8Hoch
CVE-2026-106614

ColdFusion | Incorrect Authorization (CWE-863)

Adobe ColdFusion 2025; Adobe ColdFusion 2023

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploit depends on condi…

7.5Hoch
CVE-2026-75996

ColdFusion | Uncontrolled Resource Consumption (CWE-400)

Adobe ColdFusion 2025; Adobe ColdFusion 2023

ColdFusion is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. E…

8.2Hoch
CVE-2026-105898

ColdFusion | Incorrect Authorization (CWE-863)

Adobe ColdFusion 2025; Adobe ColdFusion 2023

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this iss…

8.8Hoch
CVE-2026-106090

ColdFusion | Incorrect Authorization (CWE-863)

Adobe ColdFusion 2025; Adobe ColdFusion 2023

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this iss…

9.6Kritisch
CVE-2026-75994

ColdFusion | Incorrect Authorization (CWE-863)

Adobe ColdFusion 2025; Adobe ColdFusion 2023

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. The vulnerable component is restricted…

9.6Kritisch
CVE-2026-106620

ColdFusion | Incorrect Authorization (CWE-863)

Adobe ColdFusion 2025; Adobe ColdFusion 2023

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this…

9.9Kritisch
CVE-2026-106612

ColdFusion | Incorrect Authorization (CWE-863)

Adobe ColdFusion 2025; Adobe ColdFusion 2023

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this iss…

7.1Hoch
CVE-2026-76001

ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)

Adobe ColdFusion 2025; Adobe ColdFusion 2023

ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploit depends on conditions bey…

8.8Hoch
CVE-2026-106615

ColdFusion | Incorrect Authorization (CWE-863)

Adobe ColdFusion 2025; Adobe ColdFusion 2023

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this iss…

8.4Hoch
CVE-2026-75995

ColdFusion | Improper Input Validation (CWE-20)

Adobe ColdFusion 2025; Adobe ColdFusion 2023

ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. The vulnerable …

7.6Hoch
CVE-2026-75748

ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)

Adobe ColdFusion 2025; Adobe ColdFusion 2023

ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. An attacker with high privileges could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue…

7.5Hoch
CVE-2026-105900

ColdFusion | Improper Input Validation (CWE-20)

Adobe ColdFusion 2025; Adobe ColdFusion 2023

ColdFusion is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this i…