cbcvebase.
CVE-2026-21269
published 2026-08-11

CVE-2026-21269: is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable…

PriorityP430medium5.4CVSS 3.1
AVNACLPRLUIRSCCLILAN
EPSS
0.27%
19.2th percentile
is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.

Affected

37 ranges· showing 25
VendorProductVersion rangeFixed in
adobecoldfusion——
adobecoldfusion——
adobecoldfusion——
adobecoldfusion——
adobecoldfusion——
adobecoldfusion——
adobecoldfusion——
adobecoldfusion——
adobecoldfusion——
adobecoldfusion——
adobecoldfusion——
adobecoldfusion——
adobecoldfusion——
adobecoldfusion——
adobecoldfusion——
adobecoldfusion——
adobecoldfusion——
adobecoldfusion——
adobecoldfusion——
adobecoldfusion——
adobecoldfusion——
adobecoldfusion——
adobecoldfusion——
adobecoldfusion——
adobecoldfusion——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.