CVE-2026-34619Path Traversal in Adobe Coldfusion

CWE-22Path Traversal3 documents3 sources
Severity
7.7HIGHNVD
EPSS
0.1%
top 82.77%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedApr 14
Latest updateApr 15

Description

ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access unauthorized files or directories outside the intended restrictions. Exploitation of this issue does not require user interaction.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:HExploitability: 3.1 | Impact: 4.0

Affected Packages1 packages

CVEListV5adobe/coldfusion2025.6

🔴Vulnerability Details

2
GHSA
GHSA-x69p-j55w-wfwc: ColdFusion versions 20232026-04-15
CVEList
ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)2026-04-14
CVE-2026-34619 — Path Traversal in Adobe Coldfusion | cvebase