{"id":"CVE-2026-105897","published":"2026-10-13T21:17:29.240","lastModified":"2026-10-16T20:50:59.813","description":"ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.","cvssScore":8.6,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","cwes":["CWE-918"],"vendors":["adobe"],"products":["coldfusion"],"references":[{"url":"https://www.adobe.com/trust/security/products/coldfusion/apsb26-144.html","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":null}