← ExploitWatch
HomeExploited Vulnerabilities

CVE-2023-26359 — Actively Exploited: ColdFusion (Adobe)

Adobe ColdFusion contains a deserialization of untrusted data vulnerability that could result in code execution in the context of the current user.

CVE IDCVE-2023-26359
VendorAdobe
ProductColdFusion
Vulnerability nameAdobe ColdFusion Deserialization of Untrusted Data Vulnerability
Date added2023-08-21
Remediation due2023-09-11
Known ransomware useUnknown
Required actionApply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
DescriptionAdobe ColdFusion contains a deserialization of untrusted data vulnerability that could result in code execution in the context of the current user.
SourceCISA Known Exploited Vulnerabilities

🔍 Search all exploited vulnerabilities →