Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
5005 articles · 188942 vulns · 37/41 feeds (7d)
← Back to list
8.2
CVE-2026-21279PATCHED
adobe · coldfusion

ColdFusion | Improper Input Validation (CWE-20)

Description

is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and limited write access. Exploitation of this issue does not require user interaction.

Affected Products

VendorProductVersions
adobecoldfusion0, 0

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
adobecoldfusioncert_advisory90%

References

  • https://helpx.adobe.com/security/products/coldfusion/apsb26-90.html(vendor-advisory)

Related News (2 articles)

Tier B
BSI Advisories9h ago
[NEU] [hoch] Adobe ColdFusion: Mehrere Schwachstellen
→ No new info (linked only)
Tier C
VulDB22h ago
CVE-2026-21279 | Adobe ColdFusion input validation
→ No new info (linked only)
CVSS 3.18.2 HIGH
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
CISA KEV❌ No
Actively exploited❌ No
Patch available
2025.0.122023.0.23
CWECWE-20
PublishedAug 11, 2026
Trending Score47
Source articles2
Independent2
Info Completeness0/14
Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

CRITICALCVE-2026-71362
Adobe Commerce | Incorrect Authorization (CWE-863)
Trending: 62
CRITICALCVE-2026-48362
ColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
Trending: 62
HIGHCVE-2026-48386
ColdFusion | Use of a Broken or Risky Cryptographic Algorithm (CWE-327)
Trending: 47
HIGHCVE-2026-48414
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Trending: 46
HIGHCVE-2026-48441
Lightroom Classic | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
Trending: 46

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Aug 11, 2026
Discovered by ZDM
Aug 11, 2026
Patch Available
Aug 11, 2026