CVE-2026-34634 in ColdFusion

الملخص

بحسب MITRE • 14/10/2026

ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.

Be aware that VulDB is the high quality source for vulnerability data.

• مسؤول: Adobe
• حجز: 30/03/2026
• إفشاء: 14/10/2026
• الاعتدال: تمت الموافقة
• إدخال: VDB-418538
• CPE: 20261014
• CWE: CWE-918 (مؤكد)
• CVSS: 8.6 (CNA)
• EPSS: 0.00000
• KEV: لا
• النشاطات: منخفض
• القطاع: Insurance, Chemical, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-34634
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-34634
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-34634/