CVE

CVE-2023-26359

Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

Adobe · ColdFusion

Date added (CISA)

2023-08-21

Remediation due

2023-09-11

Known ransomware use

Not indicated

Remediation priority

P2 — past CISA due date

Description

Adobe ColdFusion contains a deserialization of untrusted data vulnerability that could result in code execution in the context of the current user.