Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:coldfusion_2025:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAdobe (fb293c1b-cab3-5565-9184-186e4ece530b)
ProductColdfusion 2025 (3b21e1fb-6908-5382-889b-475bb3242e7e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-34633 vulnerable 2026-11-03 10:17:23.558421 ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)
HIGH (7.7)
ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user interaction. Scope is changed.
Published: 2026-10-13T20:21:44.259Z
Updated: 2026-10-15T03:56:40.016Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-34634 vulnerable 2026-11-03 10:17:21.976399 ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)
HIGH (8.6)
ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.
Published: 2026-10-13T20:21:32.290Z
Updated: 2026-10-14T10:40:53.847Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-105903 vulnerable 2026-11-03 10:16:33.300711 ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94)
CRITICAL (9.9)
ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.
Published: 2026-10-13T20:21:34.492Z
Updated: 2026-10-14T10:40:53.452Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-105897 vulnerable 2026-11-03 10:16:33.280679 ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)
HIGH (8.6)
ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.
Published: 2026-10-13T20:21:45.730Z
Updated: 2026-10-14T10:40:52.357Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-105899 vulnerable 2026-11-03 10:16:33.100774 ColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434)
CRITICAL (10)
ColdFusion is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.
Published: 2026-10-13T20:21:23.594Z
Updated: 2026-10-14T10:40:54.404Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-105898 vulnerable 2026-11-03 10:16:33.064542 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-105901 vulnerable 2026-11-03 10:16:32.936770 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-106613 vulnerable 2026-11-03 10:16:14.365984 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-106622 vulnerable 2026-11-03 10:16:14.364317 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-106617 vulnerable 2026-11-03 10:16:14.222531 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-106089 vulnerable 2026-11-03 10:16:14.132755 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-106090 vulnerable 2026-11-03 10:16:14.119685 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-106612 vulnerable 2026-11-03 10:16:14.113602 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-106623 vulnerable 2026-11-03 10:16:14.077488 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-106618 vulnerable 2026-11-03 10:16:14.027659 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-106621 vulnerable 2026-11-03 10:16:14.008723 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-106614 vulnerable 2026-11-03 10:16:13.707602 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-106620 vulnerable 2026-11-03 10:16:13.659099 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-106624 vulnerable 2026-11-03 10:16:13.635234 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-106615 vulnerable 2026-11-03 10:16:13.630569 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-106619 vulnerable 2026-11-03 10:16:13.564857 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-71385 vulnerable 2026-11-03 10:16:05.179120 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-75748 vulnerable 2026-11-03 10:15:52.020056 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-75994 vulnerable 2026-11-03 10:15:51.805531 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-75995 vulnerable 2026-11-03 10:15:51.700888 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-76001 vulnerable 2026-11-03 10:15:36.056315 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-21269 vulnerable 2026-09-16 04:34:12.966914 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-34635 vulnerable 2026-09-16 04:33:46.184324 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-25652 vulnerable 2026-09-16 04:33:14.080995 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48440 vulnerable 2026-09-16 04:33:04.846584 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48362 vulnerable 2026-09-16 04:33:04.822798 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48385 vulnerable 2026-09-16 04:33:04.569928 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48273 vulnerable 2026-09-16 04:33:04.136608 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-71386 vulnerable 2026-09-16 04:32:59.410214 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-71387 vulnerable 2026-09-16 04:32:59.070296 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-75993 vulnerable 2026-09-16 04:32:53.566549 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-75998 vulnerable 2026-09-16 04:32:53.429311 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-75746 vulnerable 2026-09-16 04:32:53.401278 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-75999 vulnerable 2026-09-16 04:32:53.341531 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-76002 vulnerable 2026-09-16 04:32:47.843001 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-76190 vulnerable 2026-09-16 04:32:47.809273 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-76000 vulnerable 2026-09-16 04:32:47.768768 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48338 vulnerable 2026-07-29 00:55:01.276977 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48332 vulnerable 2026-07-29 00:55:01.275287 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48329 vulnerable 2026-07-29 00:55:01.274951 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48328 vulnerable 2026-07-29 00:55:01.274729 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48327 vulnerable 2026-07-29 00:55:01.274336 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48325 vulnerable 2026-07-29 00:55:01.274003 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48324 vulnerable 2026-07-29 00:55:01.273640 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48322 vulnerable 2026-07-29 00:55:01.273415 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48321 vulnerable 2026-07-29 00:55:01.273202 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48320 vulnerable 2026-07-29 00:55:01.272868 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48319 vulnerable 2026-07-29 00:55:01.272625 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48318 vulnerable 2026-07-29 00:55:01.272143 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-48284 vulnerable 2026-07-29 00:55:01.243012 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.