CVE-2026-34634

ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.

Score

CVSS 3.1 8.6 High

Status

Analyzed - psirt@adobe.com

Published

2026-10-13

Last modified

2026-10-20

Weaknesses

CWE-918

Affected products

• Coldfusion (Adobe)
• Coldfusion 2023 (Adobe)
• Coldfusion 2025 (Adobe)

References

• https://www.adobe.com/trust/security/products/coldfusion/apsb26-144.html