CVE-2026-106616
8.6 HIGHPublished 2026-10-13 · Updated 2026-10-16
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
ColdFusion is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction. Scope is changed.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Weaknesses
CWE-611
Vendors
adobe
Products
coldfusion
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2026-10025
- MEDIUMCVE-2026-101893
- HIGHCVE-2026-102127PoC
- HIGHCVE-2026-102155
- HIGHCVE-2026-109430
- MEDIUMCVE-2026-14304PoC
- HIGHCVE-2026-14905
- HIGHCVE-2026-17646
Related by shared AI tags and CWE weakness class. Browse the full archive.