CVE-2026-34635 PUBLISHED

ColdFusion | Use of Hard-coded Cryptographic Key (CWE-321)

Assigner: adobe
Reserved: 30.03.2026 Published: 11.08.2026 Updated: 11.08.2026

is affected by a Use of Hard-coded Cryptographic Key vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access. Exploitation of this issue does not require user interaction. Scope is changed.

Metrics

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
CVSS Score: 8.4

Product Status

Vendor Adobe
Product ColdFusion 2025
Versions Default: affected
  • affected from 0 to 2025.0.11 (incl.)
  • Version 2025.0.12 is unaffected
Vendor Adobe
Product ColdFusion 2023
Versions Default: affected
  • affected from 0 to 2023.0.22 (incl.)
  • Version 2023.0.23 is unaffected

References

Problem Types

  • Use of Hard-coded Cryptographic Key (CWE-321) CWE