cve.nowby Sazabi
← All vulnerabilities
CVE-2026-106622

ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)

Published
Last modified
Status
published
Known exploitation
Not listed in CISA KEV
Public exploit
None on Exploit-DB
CISA SSVC
  • Exploitation: none
  • Automatable: yes
  • Technical impact: total
?

Decision points from CISA's Vulnrichment, assessed (SSVC 2.0.3).

SSVC documentation

Summary

ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.

Affected versions

  • Adobe ColdFusion 2025

    through 2025.0.13

  • Adobe ColdFusion 2023

    through 2023.0.25

References 1

adobe.com