CVEvulnerability
CVE-2026-34635
8.4 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2026-08-11
- Last modified
- 2026-08-28
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.4 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
- Weaknesses
- CWE-321
Description
is affected by a Use of Hard-coded Cryptographic Key vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access. Exploitation of this issue does not require user interaction. Scope is changed.
Affected configurations
• adobe coldfusion 2023
• adobe coldfusion 2025
Related
Weakness · CWE (1)
- CWE-321 Use of Hard-coded Cryptographic Key weakness