CVE-2026-35178

The CVE-2026-35178 affects Salesforce Workbench (admin/developer tooling) prior to version 65.0.0. A remote code execution vulnerability exists in the timezone conversion flow that processes attacker-controlled cookie values in an unsafe manner. Impact is described as high for confidentiality and...

CVE-2026-34951

What is affected: Salesforce Workbench (admin/developer tooling for Force.com APIs). Vulnerability: Reflected cross-site scripting via the footerScripts parameter that does not sanitize user input before rendering in the page response. Root cause / detail: Improper neutralization of input during ...