← Back to browse · API

CVE-2023-26360

Severity
HIGH
CVSS
8.6
EPSS
0.97339
Risk score
59.07
CISA KEV
Yes
PoC
No
Published
2023-03-23
Modified
2025-10-21
First seen
2026-08-07
Aliases
EUVD-2023-30181, GHSA-P86R-CR5M-73HP
Products
Adobe:ColdFusion, Adobe:ColdFusion unspecified ≤CF2018U15, Adobe:ColdFusion unspecified ≤CF2021U5, Adobe:ColdFusion unspecified ≤None
Sources
cisa.gov CVE-2023-26360
euvd EUVD-2023-30181

Description

Adobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and earlier) are affected by an Improper Access Control vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction.

References