CVE-2023-26360 · Sandworm Watch

Mar 15, 2023high

CVE-2023-26360: Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for remote code execution. Required action: Apply updates per vendor instructions.

CVE-2023-26360EPSS 97.3%AdobeColdFusion

CISA KEV ↗ · unattributed attribution