← CVE Intelligence

CVE-2026-34635

ColdFusion | Use of Hard-coded Cryptographic Key (CWE-321) PUBLISHED

Description (CNA)

is affected by a Use of Hard-coded Cryptographic Key vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access. Exploitation of this issue does not require user interaction. Scope is changed.

Affected (CNA)

Vendor / productVersions
Adobe / ColdFusion 2025affected 0 through 2025.0.11; unaffected 2025.0.12
Adobe / ColdFusion 2023affected 0 through 2023.0.22; unaffected 2023.0.23

CWE

CWE-321

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.