CVE-2026-34635
Severity CVSS v4.0:
Pending analysis
Type:
CWE-321
Use of Hard-coded Cryptographic Key
Publication date:
11/08/2026
Last modified:
13/08/2026
Description
is affected by a Use of Hard-coded Cryptographic Key vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access. Exploitation of this issue does not require user interaction. Scope is changed.
Impact
Base Score 3.x
8.40
Severity 3.x
HIGH
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:a:adobe:coldfusion:2023:-:*:*:*:*:*:* | ||
| cpe:2.3:a:adobe:coldfusion:2023:update1:*:*:*:*:*:* | ||
| cpe:2.3:a:adobe:coldfusion:2023:update10:*:*:*:*:*:* | ||
| cpe:2.3:a:adobe:coldfusion:2023:update11:*:*:*:*:*:* | ||
| cpe:2.3:a:adobe:coldfusion:2023:update12:*:*:*:*:*:* | ||
| cpe:2.3:a:adobe:coldfusion:2023:update13:*:*:*:*:*:* | ||
| cpe:2.3:a:adobe:coldfusion:2023:update14:*:*:*:*:*:* | ||
| cpe:2.3:a:adobe:coldfusion:2023:update15:*:*:*:*:*:* | ||
| cpe:2.3:a:adobe:coldfusion:2023:update16:*:*:*:*:*:* | ||
| cpe:2.3:a:adobe:coldfusion:2023:update17:*:*:*:*:*:* | ||
| cpe:2.3:a:adobe:coldfusion:2023:update18:*:*:*:*:*:* | ||
| cpe:2.3:a:adobe:coldfusion:2023:update19:*:*:*:*:*:* | ||
| cpe:2.3:a:adobe:coldfusion:2023:update2:*:*:*:*:*:* | ||
| cpe:2.3:a:adobe:coldfusion:2023:update20:*:*:*:*:*:* | ||
| cpe:2.3:a:adobe:coldfusion:2023:update21:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page


