{"vulnerability": "CVE-2026-7138", "sightings": [{"uuid": "0c2940b2-10f0-4298-b60b-66eb8ebfd42c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71384", "type": "seen", "source": "https://t.me/CyberDispatch/2538", "content": "Adobe on Tuesday rolled out patches for over 50 vulnerabilities across its products, including critical-severity bugs in ColdFusion, Campaign Classic, and Commerce.\n\nWith a priority 1 rating, the ColdFusion update fixes 15 security defects, including three flagged as critical that could lead to arbitrary code execution and application denial-of-service (DoS).\n\nThese include an OS command injection tracked as CVE-2026-48362 (CVSS score of 10/10), an eval injection tracked as CVE-2026-48273 (CVSS score of 9.9/10), and an incorrect authorization tracked as CVE-2026-71384 (CVSS score of 9.6/10).", "creation_timestamp": "2026-08-30T00:00:38.325473Z"}, {"uuid": "e9bebd5d-558f-4fa6-893b-54b72d318f7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71386", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/a2frhswbsmsy4", "content": "CVE-2026-71386 - ColdFusion | Cross-site Scripting (XSS) (CWE-79)\nCVE ID : CVE-2026-71386\n \n Published : Aug. 11, 2026, 5:19 p.m. | 41\u00a0minutes ago\n \n Description : is affected by a Cross-site Scripting (XSS) vulnerability that could result in arbitrary code execution in the co...", "creation_timestamp": "2026-08-11T18:19:25.191352Z"}, {"uuid": "ce64f5ee-8d36-44bc-899f-c23255c89e79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71384", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mstelnh7fa27", "content": "CVE-2026-71384 - coldfusion 2025\nThis issue affects a component of is, which is typically restricted to an administrative network. An attacker could bypass security measures to gain unauthorized access,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#coldfusion2025 #adobe #CVE #infosec", "creation_timestamp": "2026-08-11T19:40:05.801188Z"}, {"uuid": "c4a11c47-f9d6-4c89-9f48-d551996d56a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71384", "type": "seen", "source": "https://t.me/CyberDispatch/2538", "content": "Adobe on Tuesday rolled out patches for over 50 vulnerabilities across its products, including critical-severity bugs in ColdFusion, Campaign Classic, and Commerce.\n\nWith a priority 1 rating, the ColdFusion update fixes 15 security defects, including three flagged as critical that could lead to arbitrary code execution and application denial-of-service (DoS).\n\nThese include an OS command injection tracked as CVE-2026-48362 (CVSS score of 10/10), an eval injection tracked as CVE-2026-48273 (CVSS score of 9.9/10), and an incorrect authorization tracked as CVE-2026-71384 (CVSS score of 9.6/10).", "creation_timestamp": "2026-08-29T20:00:05.845860Z"}, {"uuid": "4dd6f433-2782-4a51-a3cb-af113d5a2be6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-71380", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-erlang/otp-3", "content": "", "creation_timestamp": "2026-09-02T12:45:22.898707Z"}]}