{"schema_version":1,"title":"Adobe ColdFusion 2023 vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 6 vulnerabilities in Adobe ColdFusion 2023: 0 in the last 7 days and 6 in the last 90 days, 2 of them critical and 0 exploited in the wild. The most recent, CVE-2026-75994, was published on 13 October 2026. 6 vulnerabilities in the last four weeks, up from none in the four before. 2 critical against 0.","url":"https://junglewise.ai/threats/technologies/coldfusion-2023","json_url":"https://junglewise.ai/threats/technologies/coldfusion-2023.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/coldfusion-2023","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":false,"counts":{"high":4,"all_time":6,"critical":2,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":6,"last_365_days":6},"latest":[{"cve":"CVE-2026-75994","cvss":9.6,"epss":0.0033,"slug":"cve-2026-75994-coldfusion-is-affected-by-an-incorrect-authorization","title":"Adobe ColdFusion authorization bypass leading to code execution","severity":"critical","exploited":false,"published_at":"2026-10-13T21:18:20.38+00:00","url":"https://junglewise.ai/threats/cve-2026-75994-coldfusion-is-affected-by-an-incorrect-authorization"},{"cve":"CVE-2026-34634","cvss":8.6,"epss":0.0066,"slug":"cve-2026-34634-coldfusion-is-affected-by-a-server-side-request-forgery-ssrf","title":"Adobe ColdFusion server-side request forgery privilege escalation","severity":"high","exploited":false,"published_at":"2026-10-13T21:17:38.23+00:00","url":"https://junglewise.ai/threats/cve-2026-34634-coldfusion-is-affected-by-a-server-side-request-forgery-ssrf"},{"cve":"CVE-2026-106623","cvss":7.5,"epss":0.0049,"slug":"cve-2026-106623-coldfusion-is-affected-by-an-incorrect-authorization","title":"Adobe ColdFusion incorrect authorization memory disclosure","severity":"high","exploited":false,"published_at":"2026-10-13T21:17:31.597+00:00","url":"https://junglewise.ai/threats/cve-2026-106623-coldfusion-is-affected-by-an-incorrect-authorization"},{"cve":"CVE-2026-105994","cvss":7.7,"epss":0.0038,"slug":"cve-2026-105994-coldfusion-is-affected-by-an-incorrect-authorization","title":"Adobe ColdFusion authorization bypass security feature bypass","severity":"high","exploited":false,"published_at":"2026-10-13T21:17:29.923+00:00","url":"https://junglewise.ai/threats/cve-2026-105994-coldfusion-is-affected-by-an-incorrect-authorization"},{"cve":"CVE-2026-105899","cvss":10,"epss":0.0055,"slug":"cve-2026-105899-coldfusion-is-affected-by-an-unrestricted-upload-of-file-with","title":"Adobe ColdFusion unrestricted file upload remote code execution","severity":"critical","exploited":false,"published_at":"2026-10-13T21:17:29.483+00:00","url":"https://junglewise.ai/threats/cve-2026-105899-coldfusion-is-affected-by-an-unrestricted-upload-of-file-with"},{"cve":"CVE-2026-105897","cvss":8.6,"epss":0.0048,"slug":"cve-2026-105897-coldfusion-is-affected-by-a-server-side-request-forgery-ssrf","title":"Adobe ColdFusion Server-Side Request Forgery privilege escalation","severity":"high","exploited":false,"published_at":"2026-10-13T21:17:29.24+00:00","url":"https://junglewise.ai/threats/cve-2026-105897-coldfusion-is-affected-by-a-server-side-request-forgery-ssrf"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":2,"exploited":0,"vulnerabilities":6},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Adobe ColdFusion","slug":"coldfusion","vulnerabilities":95,"url":"https://junglewise.ai/threats/technologies/coldfusion"},{"name":"Adobe Experience Manager","slug":"adobe-experience-manager","vulnerabilities":74,"url":"https://junglewise.ai/threats/technologies/adobe-experience-manager"},{"name":"Adobe Commerce","slug":"commerce","vulnerabilities":72,"url":"https://junglewise.ai/threats/technologies/commerce"},{"name":"Adobe Acrobat","slug":"acrobat","vulnerabilities":65,"url":"https://junglewise.ai/threats/technologies/acrobat"},{"name":"Adobe Acrobat Reader","slug":"acrobat-reader","vulnerabilities":60,"url":"https://junglewise.ai/threats/technologies/acrobat-reader"},{"name":"Adobe Flash Player","slug":"flash-player","vulnerabilities":56,"url":"https://junglewise.ai/threats/technologies/flash-player"},{"name":"Adobe AIR","slug":"air","vulnerabilities":55,"url":"https://junglewise.ai/threats/technologies/air"},{"name":"Adobe C2pa","slug":"c2pa","vulnerabilities":52,"url":"https://junglewise.ai/threats/technologies/c2pa"},{"name":"Adobe C2pa-Web","slug":"c2pa-web","vulnerabilities":51,"url":"https://junglewise.ai/threats/technologies/c2pa-web"},{"name":"Adobe Content Credentials Rust SDK","slug":"content-credentials-rust-sdk","vulnerabilities":44,"url":"https://junglewise.ai/threats/technologies/content-credentials-rust-sdk"},{"name":"Adobe Content Credentials JS SDK","slug":"content-credentials-js-sdk","vulnerabilities":42,"url":"https://junglewise.ai/threats/technologies/content-credentials-js-sdk"},{"name":"Adobe Acrobat DC","slug":"acrobat-dc","vulnerabilities":41,"url":"https://junglewise.ai/threats/technologies/acrobat-dc"}],"technology":{"hub":true,"name":"Adobe ColdFusion 2023","slug":"coldfusion-2023","vendor":{"hub":true,"name":"Adobe","slug":"adobe","url":"https://junglewise.ai/threats/vendors/adobe"},"aliases":[],"category":"web-server","description":"Server-side rapid application development platform by Adobe for building dynamic web applications and services.","url":"https://junglewise.ai/threats/technologies/coldfusion-2023"},"most_severe":[{"cve":"CVE-2026-105899","cvss":10,"epss":0.0055,"slug":"cve-2026-105899-coldfusion-is-affected-by-an-unrestricted-upload-of-file-with","title":"Adobe ColdFusion unrestricted file upload remote code execution","severity":"critical","exploited":false,"published_at":"2026-10-13T21:17:29.483+00:00","url":"https://junglewise.ai/threats/cve-2026-105899-coldfusion-is-affected-by-an-unrestricted-upload-of-file-with"},{"cve":"CVE-2026-75994","cvss":9.6,"epss":0.0033,"slug":"cve-2026-75994-coldfusion-is-affected-by-an-incorrect-authorization","title":"Adobe ColdFusion authorization bypass leading to code execution","severity":"critical","exploited":false,"published_at":"2026-10-13T21:18:20.38+00:00","url":"https://junglewise.ai/threats/cve-2026-75994-coldfusion-is-affected-by-an-incorrect-authorization"},{"cve":"CVE-2026-34634","cvss":8.6,"epss":0.0066,"slug":"cve-2026-34634-coldfusion-is-affected-by-a-server-side-request-forgery-ssrf","title":"Adobe ColdFusion server-side request forgery privilege escalation","severity":"high","exploited":false,"published_at":"2026-10-13T21:17:38.23+00:00","url":"https://junglewise.ai/threats/cve-2026-34634-coldfusion-is-affected-by-a-server-side-request-forgery-ssrf"},{"cve":"CVE-2026-105897","cvss":8.6,"epss":0.0048,"slug":"cve-2026-105897-coldfusion-is-affected-by-a-server-side-request-forgery-ssrf","title":"Adobe ColdFusion Server-Side Request Forgery privilege escalation","severity":"high","exploited":false,"published_at":"2026-10-13T21:17:29.24+00:00","url":"https://junglewise.ai/threats/cve-2026-105897-coldfusion-is-affected-by-a-server-side-request-forgery-ssrf"},{"cve":"CVE-2026-105994","cvss":7.7,"epss":0.0038,"slug":"cve-2026-105994-coldfusion-is-affected-by-an-incorrect-authorization","title":"Adobe ColdFusion authorization bypass security feature bypass","severity":"high","exploited":false,"published_at":"2026-10-13T21:17:29.923+00:00","url":"https://junglewise.ai/threats/cve-2026-105994-coldfusion-is-affected-by-an-incorrect-authorization"},{"cve":"CVE-2026-106623","cvss":7.5,"epss":0.0049,"slug":"cve-2026-106623-coldfusion-is-affected-by-an-incorrect-authorization","title":"Adobe ColdFusion incorrect authorization memory disclosure","severity":"high","exploited":false,"published_at":"2026-10-13T21:17:31.597+00:00","url":"https://junglewise.ai/threats/cve-2026-106623-coldfusion-is-affected-by-an-incorrect-authorization"}],"generated_at":"2026-11-13T03:07:00.155039+00:00"}