Back to CVE Browser

CVE-2023-26360

🔥 Known Exploited (CISA KEV)HIGH

8.6

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2023-03-23

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

Adobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and earlier) are affected by an Improper Access Control vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction.

Affected Platforms (CPE)

📦

Adobe

Coldfusion

= 2018= 2021

References & Advisories

🔗 http://packetstormsecurity.com/files/172079/Adobe-ColdFusion-Unauthenticated-Remote-Code-Execution.html

🔗 https://helpx.adobe.com/security/products/coldfusion/apsb23-25.html

🔗 http://packetstormsecurity.com/files/172079/Adobe-ColdFusion-Unauthenticated-Remote-Code-Execution.html

🔗 https://helpx.adobe.com/security/products/coldfusion/apsb23-25.html

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-26360

Related Security Intelligence Articles

Global Cyber Intel Digest: July 21, 2026

Comprehensive breakdown of critical vulnerability advisories across VMware vCenter, F5 BIG-IP, and GitLab platforms, alongside threat actor reconnaissance trends and ransomware response strategies.

Related Vulnerabilities

CVE-2026-483386.8

ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that cou...

CVE-2026-483249.1

ColdFusion is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability th...

CVE-2026-483219.3

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could le...

CVE-2026-483199.1

ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that cou...