Adobe ColdFusion 2023

• CVE-2026-34635 High 8.4 ColdFusion | Use of Hard-coded Cryptographic Key (CWE-321) 0.2%
• CVE-2026-48386 High 7.5 ColdFusion | Use of a Broken or Risky Cryptographic Algorithm (CWE-327) 1.0%
• CVE-2026-48362 Critical 10.0 ColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78) 3.5%
• CVE-2026-71386 High 8.8 ColdFusion | Cross-site Scripting (XSS) (CWE-79) 0.5%
• CVE-2026-71384 Critical 9.6 ColdFusion | Incorrect Authorization (CWE-863) 0.5%
• CVE-2026-25652 High 7.8 ColdFusion | Incorrect Authorization (CWE-863) 0.2%
• CVE-2026-21273 High 8.7 ColdFusion | Improper Input Validation (CWE-20) 0.9%
• CVE-2026-48320 High 8.5 ColdFusion | Cross-site Scripting (Reflected XSS) (CWE-79) 0.4%
• CVE-2026-48324 Critical 9.1 ColdFusion | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) 1.1%
• CVE-2026-48332 High 7.7 ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918) 0.8%
• CVE-2026-48318 Critical 9.9 ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) 1.1%
• CVE-2026-48327 Critical 9.0 ColdFusion | Incorrect Authorization (CWE-863) 0.4%
• CVE-2026-48338 Medium 6.8 ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) 0.5%
• CVE-2026-48329 Low 2.7 ColdFusion | Insufficient Session Expiration (CWE-613) 0.6%
• CVE-2026-48319 Critical 9.1 ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) 1.4%
• CVE-2026-48321 Critical 9.3 ColdFusion | Incorrect Authorization (CWE-863) 0.4%
• CVE-2026-48322 Critical 9.9 ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94) 1.2%
• CVE-2026-48284 Critical 9.6 ColdFusion | Improper Input Validation (CWE-20) 0.5%
• CVE-2026-48328 High 7.7 ColdFusion | Improper Input Validation (CWE-20) 0.8%
• CVE-2026-48325 Critical 9.3 ColdFusion | Missing Authentication for Critical Function (CWE-306) 0.6%
• CVE-2026-48363 High 8.2 ColdFusion | Uncontrolled Search Path Element (CWE-427) 0.3%
• CVE-2026-48364 High 8.2 ColdFusion | Uncontrolled Search Path Element (CWE-427) 0.3%
• CVE-2026-48316 Critical 10.0 ColdFusion | Improper Input Validation (CWE-20) 1.1%
• CVE-2026-48315 Critical 9.3 ColdFusion | Improper Input Validation (CWE-20) 1.0%
• CVE-2026-48281 Critical 10.0 ColdFusion | Improper Input Validation (CWE-20) 1.4%
• CVE-2026-48277 Critical 10.0 ColdFusion | Improper Input Validation (CWE-20) 1.3%
• CVE-2026-48285 High 8.6 ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918) 0.8%
• CVE-2026-48313 Critical 9.3 ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) 3.0%
• CVE-2026-48307 High 8.8 ColdFusion | Cross-site Scripting (Reflected XSS) (CWE-79) 0.5%
• CVE-2026-48314 Medium 6.5 ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) 0.6%
• CVE-2026-48276 Critical 10.0 ColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434) 1.3%
• CVE-2026-48283 Critical 10.0 ColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434) 1.3%
• CVE-2026-47929 High 8.4 ColdFusion | Incorrect Authorization (CWE-863) 1.9%
• CVE-2026-47932 High 8.8 ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) 2.3%
• CVE-2026-47960 High 7.4 ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611) 0.5%
• CVE-2026-47928 Critical 9.6 ColdFusion | Improper Input Validation (CWE-20) 2.1%
• CVE-2026-47931 High 8.4 ColdFusion | Improper Input Validation (CWE-20) 0.2%
• CVE-2026-47930 High 8.1 ColdFusion | Improper Input Validation (CWE-20) 0.6%
• CVE-2026-47933 Medium 4.8 ColdFusion | Cross-site Scripting (Stored XSS) (CWE-79) 0.2%
• CVE-2026-34619 High 7.7 ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) 7.6%
• CVE-2026-27308 Low 2.4 ColdFusion | Uncontrolled Resource Consumption (CWE-400) 2.5%
• CVE-2026-27282 High 7.5 ColdFusion | Improper Input Validation (CWE-20) 0.7%
• CVE-2026-27305 High 8.6 ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) 26.3%
• CVE-2026-27304 Critical 9.3 ColdFusion | Improper Input Validation (CWE-20) 3.6%
• CVE-2026-27306 High 8.4 ColdFusion | Improper Input Validation (CWE-20) 0.3%
• CVE-2026-27307 Low 2.4 ColdFusion | Uncontrolled Resource Consumption (CWE-400) 2.7%