返回 CVE 瀏覽器

CVE-2023-26360

🔥 Known Exploited (CISA KEV)HIGH

8.6

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2023-03-23

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

Adobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and earlier) are affected by an Improper Access Control vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction.

Affected Platforms (CPE)

📦

Adobe

Coldfusion

= 2018= 2021

References & Advisories

🔗 http://packetstormsecurity.com/files/172079/Adobe-ColdFusion-Unauthenticated-Remote-Code-Execution.html

🔗 https://helpx.adobe.com/security/products/coldfusion/apsb23-25.html

🔗 http://packetstormsecurity.com/files/172079/Adobe-ColdFusion-Unauthenticated-Remote-Code-Execution.html

🔗 https://helpx.adobe.com/security/products/coldfusion/apsb23-25.html

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-26360

相關資安分析文章

全球網絡威脅情報摘要：2026 年 7 月 21 日

本期威脅情報分析 VMware vCenter、F5 BIG-IP 與 GitLab 關鍵漏洞安全修補警訊，同時彙整最新醫療與關鍵基礎設施平台遭勒索軟體攻擊之防禦防範措施。

相關漏洞威脅

CVE-2026-483386.8

ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that cou...

CVE-2026-483249.1

ColdFusion is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability th...

CVE-2026-483219.3

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could le...

CVE-2026-483199.1

ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that cou...