CVE-2026-82153

The Dell OS Recovery Tool (versions prior to 2.4.4 ) is affected by an Insecure Storage of Sensitive Information vulnerability (CWE-922). A low privileged attacker with physical access could exploit this flaw to cause Information Disclosure . Remediation is available via security update DSA-2026-...

CVE-2026-82153

Dell OS Recovery Tool, versions prior to 2.4.4, contains an Insecure Storage of Sensitive Information vulnerability. A low privileged attacker with physical access could potentially exploit this vulnerability, leading to Information Disclosure...

CVE-2026-106090

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction...

CVE-2026-106613

ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction...

CVE-2026-106618

Adobe ColdFusion is affected by an Incorrect Authorization vulnerability (CWE-863 ). A low-privileged attacker can exploit this issue to achieve arbitrary code execution in the context of the current user. The vulnerability requires no user interaction and is characterized by a changed scope . Sp...

EUVD-2026-100670

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user...

CVE-2026-106089

ColdFusion is affected by an Incorrect Authorization vulnerability (CWE-863) that could lead to arbitrary code execution within the context of the current user. A low-privileged attacker can exploit this issue without requiring any user interaction. The provided documents do not specify the exact...

CVE-2026-106613

Adobe ColdFusion is affected by an Improper Input Validation vulnerability (CWE-20). This flaw allows a low-privileged attacker to execute arbitrary code within the context of the current user. Exploitation does not require any user interaction. Specific technical details regarding the vulnerable...

CVE-2026-106613 ColdFusion | Improper Input Validation (CWE-20)

ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction...

CVE-2026-106614 ColdFusion | Incorrect Authorization (CWE-863)

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploit depends on conditions beyond the attacker's control...

CVE-2026-105898

ColdFusion is affected by an Incorrect Authorization vulnerability (CWE-863) that could lead to arbitrary code execution in the context of the current user. A low-privileged attacker can exploit this issue, though the attack requires user interaction to open a malicious file. The impact is charac...

CVE-2026-106090 ColdFusion | Incorrect Authorization (CWE-863)

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction...

EUVD-2026-100510

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction...

CVE-2026-106615

Adobe ColdFusion is affected by an Incorrect Authorization vulnerability (CWE-863 ) that allows a low-privileged attacker to achieve arbitrary code execution within the context of the current user. This vulnerability can be exploited without any user interaction. The provided documents do not spe...

CVE-2026-106615 ColdFusion | Incorrect Authorization (CWE-863)

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction...

CVE-2026-105901

Adobe ColdFusion is affected by an Incorrect Authorization vulnerability (CWE-863) that allows a low-privileged attacker to achieve arbitrary code execution in the context of the current user. This vulnerability does not require user interaction and results in a change of scope. No specific techn...

CVE-2026-106617 ColdFusion | Incorrect Authorization (CWE-863)

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction...

CVE-2026-90531

Adobe Experience Manager is affected by an Improper Restriction of XML External Entity Reference 'XXE' vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does...

CVE-2026-109415

Adobe Experience Manager is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the...

CVE-2026-110073

Adobe Experience Manager is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the...