CVE record · 2 sources
CVE-2026-106622
CVSS 10.0ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation.
- Vendor
- Adobe
- Product
- coldfusion
- CVSS
- 10.0
- EPSS
- 0.012 (p67)
- Exposure class
- Web platform
Coverage
2Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
October 2026 Patch Tuesday
What's happened since September Patch Tuesday Here’s a fun fact to start this month. Ivanti’s Vulnerability Knowledge Base is now tracking more than 406,000 CVEs. Over 78,000 of them were disclosed in 2026 alone, which is more…
-
ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation.
ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.