VulnSocial

CVE-2026-21279Disclosure(adobe / coldfusion)

LOWCVSS 8.2 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch adobe coldfusion systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and limited write access. Exploitation of this issue does not require user interaction.

adobe CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-20

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • coldfusion

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 3 signals
  • Disclosure: 1 classified signal
  • General: 1 classified signal
  • Peaked 1d ago at 2 mentions (2026-08-11); latest day: 1
  • 3 total mentions across 2 days

Affected systems

Vendors
adobe
Products
coldfusion

2 versions affected across 1 product

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-08-11: 2Mentions · 2026-08-12: 1Patch / Workaround · 2026-08-12: 1Technical Details · 2026-08-11: 2Technical Details · 2026-08-12: 108-1108-12
Signal classification3 categories
Disclosure
133.3%
General
133.3%
Patch
133.3%
Referenced assets2 URLs
By indicator
Classification over time
DateTotalLabels
2026-08-112
Disclosure1General1
2026-08-121
Patch1
Full discourse3 posts
  • kawn@kawn2020
    Patch

    #securityupdate #adobeupdate #adobe #ColdFusion ColdFusion 2025 2025.0.12 ColdFusion 2023 2023.0.23 ・CVE-2026-48362（CVSS 10.0） ・CVE-2026-48273（〃　9.9） ・CVE-2026-21279 ・CVE-2026-25652 ・CVE-2026-34635 ・CVE-2026-48386 ・CVE-2026-48440 ・CVE-2026-71384 つづく…

    Post summary

    The text announces security updates for Adobe ColdFusion 2025 and 2023 that address several high‑severity CVEs, providing CVSS scores but no exploit details or patch instructions.

    1000051
    90 followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-21279 is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass secu… https://www.cve.org/CVERecord?id=CVE-2026-21279 ----- Traducción: CVE-2026-21279 est… http://infoflow.cloud`

    Post summary

    The post announces CVE-2026-21279, describing it as an improper input validation flaw that can bypass a security feature, but provides no exploit, PoC, patch, or evidence of active exploitation.

    0000030
    97 followersView on X
  • CVE@CVEnew
    General

    CVE-2026-21279 is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass secu… https://www.cve.org/CVERecord?id=CVE-2026-21279

    Post summary

    The snippet merely notes that CVE-2026-21279 is an Improper Input Validation flaw that could allow a security feature bypass, with no evidence of exploits, patches, or real-world usage.

    00000887
    57.9K followersView on X
CPE platform detail35 entries

35 of 35 entries

PartVendorProductVersionTarget SWTarget HW
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2023--
Appadobecoldfusion2025--
Appadobecoldfusion2025--
Appadobecoldfusion2025--
Appadobecoldfusion2025--
Appadobecoldfusion2025--
Appadobecoldfusion2025--
Appadobecoldfusion2025--
Appadobecoldfusion2025--
Appadobecoldfusion2025--
Appadobecoldfusion2025--
Appadobecoldfusion2025--
Appadobecoldfusion2025--

Explore more

Back to dashboardadobe CVEscoldfusion vulnerabilities