CVE-2026-106624

Vendor

Adobe

Product

coldfusion

CVSS

10.0

EPSS

0.012 (p67)

Exposure class

Web platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 55
   Ivanti advisory Ivanti 18d ago

   October 2026 Patch Tuesday

   What's happened since September Patch Tuesday Here’s a fun fact to start this month. Ivanti’s Vulnerability Knowledge Base is now tracking more than 406,000 CVEs. Over 78,000 of them were disclosed in 2026 alone, which is more…

   Exploited CVSS 8.7 No fix yet CVE-2026-88779CVE-2026-104286CVE-2026-102255+11 more Ivanti
2. 29
   CVE NVD 18d ago

   ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in…

   ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability…

   CVSS 10.0 CVE-2026-106624 Adobe