Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

概要

参考情報

• packetstormsecurity.com/files/172079/Adobe-ColdFusion-Unauthenticated-Remote-Code-Execution.html · Exploit
• helpx.adobe.com/security/products/coldfusion/apsb23-25.html · Patch
• cisa.gov/known-exploited-vulnerabilities-catalog · Third Party Advisory
• CISA KEV · CVE-2023-26360

coldfusion のその他の脆弱性

• CVE-2026-76001高 7.1ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged att…
• CVE-2026-75996高 7.5ColdFusion is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker c…
• CVE-2026-75995高 8.4ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the cur…
• CVE-2026-75994緊急 9.6ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the curre…
• CVE-2026-75748高 7.6ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. An attacker with hig…