CVE-2026-34619Disclosure(adobe / coldfusion)

ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) CVE: CVE-2026-34619 PT ID: PT-2026-32934 Vendor: Adobe Product: ColdFusion CVSS: 7.7 Credits: n/a Description: ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access unauthorized files or directories outside the intended restrictions. Exploitation of this issue does not require user interaction. References: • https://dbugs.ptsecurity.com/vulnerability/CVE-2026-34619 • https://helpx.adobe.com/security/products/coldfusion/apsb26-38.html #dbugs_vuln

CVE-2026-34619 ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that c… https://www.cve.org/CVERecord?id=CVE-2026-34619

CVE-2026-34619 | Adobe ColdFusion | Path Traversal Description ColdFusion versions 2023.18, 2025.6 and earlier suffer from a path traversal vulnerability that allows unauth attackers to bypass security restrictions and access unauthorized files or directories outside intended paths by sending crafted requests; no user interaction is required. Severity: High Exploitation: Unknown Public PoC: Unknown Patch Available: Yes Affected Product: Adobe ColdFusion Affected Version: >= 0 and <= 2025.6 Sources Vendor: https://helpx.adobe.com/security/products/coldfusion/apsb26-38.html