Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
5924 articles · 249450 vulns · 37/41 feeds (7d)
← Back to list
10.0
CVE-2026-106622PATCHED
adobe · coldfusion

ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)

Description

ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.

Affected Products

VendorProductVersions
adobecoldfusion0, 0

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
adobecoldfusioncert_advisory90%

References

  • https://www.adobe.com/trust/security/products/coldfusion/apsb26-144.html(vendor-advisory)

Related News (3 articles)

Tier B
BSI Advisories9d ago
[NEU] [hoch] Adobe ColdFusion: Mehrere Schwachstellen
→ No new info (linked only)
Tier B
CERT-FR9d ago
Multiples vulnérabilités dans les produits Adobe (14 octobre 2026)
→ No new info (linked only)
Tier C
VulDB9d ago
CVE-2026-106622 | Adobe ColdFusion server-side request forgery
→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.110.0 CRITICAL
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA KEV❌ No
Actively exploited❌ No
Patch available
2025.0.142023.0.26
CWECWE-918
PublishedOct 13, 2026
Last enriched10d ago
Trending Score21
Source articles3
Independent3
Info Completeness5/14
Missing: vendor, product, versions, epss, kev, exploit, patch, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

CRITICALCVE-2026-75650EXPKEV
Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)
Trending: 102
CRITICALCVE-2026-103849
Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)
Trending: 32
CRITICALCVE-2026-106621
ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94)
Trending: 21
CRITICALCVE-2026-105899
ColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434)
Trending: 21
CRITICALCVE-2026-106624
ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94)
Trending: 21

Pin to Dashboard

Verification

State: verified
Confidence: 100%

Vulnerability Timeline

CVE Published
Oct 13, 2026
Discovered by ZDM
Oct 13, 2026
Patch Available
Oct 14, 2026