{"vulnerability": "CVE-2026-71384", "sightings": [{"uuid": "0c2940b2-10f0-4298-b60b-66eb8ebfd42c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71384", "type": "seen", "source": "https://t.me/CyberDispatch/2538", "content": "Adobe on Tuesday rolled out patches for over 50 vulnerabilities across its products, including critical-severity bugs in ColdFusion, Campaign Classic, and Commerce.\n\nWith a priority 1 rating, the ColdFusion update fixes 15 security defects, including three flagged as critical that could lead to arbitrary code execution and application denial-of-service (DoS).\n\nThese include an OS command injection tracked as CVE-2026-48362 (CVSS score of 10/10), an eval injection tracked as CVE-2026-48273 (CVSS score of 9.9/10), and an incorrect authorization tracked as CVE-2026-71384 (CVSS score of 9.6/10).", "creation_timestamp": "2026-08-30T00:00:38.325473Z"}, {"uuid": "ce64f5ee-8d36-44bc-899f-c23255c89e79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71384", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mstelnh7fa27", "content": "CVE-2026-71384 - coldfusion 2025\nThis issue affects a component of is, which is typically restricted to an administrative network. An attacker could bypass security measures to gain unauthorized access,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#coldfusion2025 #adobe #CVE #infosec", "creation_timestamp": "2026-08-11T19:40:05.801188Z"}, {"uuid": "c4a11c47-f9d6-4c89-9f48-d551996d56a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71384", "type": "seen", "source": "https://t.me/CyberDispatch/2538", "content": "Adobe on Tuesday rolled out patches for over 50 vulnerabilities across its products, including critical-severity bugs in ColdFusion, Campaign Classic, and Commerce.\n\nWith a priority 1 rating, the ColdFusion update fixes 15 security defects, including three flagged as critical that could lead to arbitrary code execution and application denial-of-service (DoS).\n\nThese include an OS command injection tracked as CVE-2026-48362 (CVSS score of 10/10), an eval injection tracked as CVE-2026-48273 (CVSS score of 9.9/10), and an incorrect authorization tracked as CVE-2026-71384 (CVSS score of 9.6/10).", "creation_timestamp": "2026-08-29T20:00:05.845860Z"}]}