LLucee

Products

Exploited and recent CVEs

• CVE-2026-29519 High 8.2 Lucee CFML Server Reflected XSS via URL Path Parsing 0.5%
• CVE-2023-53880 Medium 4.8 Lucee 5.4.2.17 Authenticated Reflected Cross-Site Scripting via Admin Interfaces 0.3%
• CVE-2024-55354 High 8.8 Lucee before 5.4.7.3 LTS and 6 before 6.1.1.118, when an attacker can place files on the server, is vulnerable to a protection mechanism failure that can let an attacker run code that would be expecte 0.2%
• CVE-2023-38693 Critical 9.8 RCE in Lucee REST endpoint 0.8%
• CVE-2021-21307 High 8.6 Remote Code Exploit in Lucee Admin 89.2%