High severity8.4NVD Advisory· Published Aug 11, 2026· Updated Aug 28, 2026
CVE-2026-34635
CVE-2026-34635
Description
is affected by a Use of Hard-coded Cryptographic Key vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access. Exploitation of this issue does not require user interaction. Scope is changed.
Affected products
36cpe:2.3:a:adobe:coldfusion:2023:-:*:*:*:*:*:*+ 35 more
- cpe:2.3:a:adobe:coldfusion:2023:-:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2023:update1:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2023:update10:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2023:update11:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2023:update12:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2023:update13:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2023:update14:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2023:update15:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2023:update16:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2023:update17:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2023:update18:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2023:update19:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2023:update2:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2023:update20:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2023:update21:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2023:update22:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2023:update3:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2023:update4:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2023:update5:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2023:update6:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2023:update7:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2023:update8:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2023:update9:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2025:-:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2025:update1:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2025:update10:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2025:update11:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2025:update2:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2025:update3:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2025:update4:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2025:update5:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2025:update6:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2025:update7:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2025:update8:*:*:*:*:*:*
- cpe:2.3:a:adobe:coldfusion:2025:update9:*:*:*:*:*:*
- (no CPE)
Patches
Vulnerability mechanics
References
1- helpx.adobe.com/security/products/coldfusion/apsb26-90.htmlnvdVendor Advisory
News mentions
2- Critical Adobe ColdFusion Vulnerabilities Allow Attackers to Execute Arbitrary CodeCyber Security News · Aug 12, 2026
- Adobe ColdFusion: 16 Vulnerabilities Including Critical RCE and Auth Bypass Patched TogetherVypr Intelligence · Aug 11, 2026