CVE-2026-34619 is a path traversal vulnerability in Adobe ColdFusion that enables remote attackers to circumvent directory restrictions and access files or directories outside the intended scope. This vulnerability requires no user interaction and has a high severity rating (CVSS 7.7). Affected versions include ColdFusion 2023.18, 2025.6, and earlier. As of the published date, Adobe has not released an official patch or remediation guidance, and no active exploitation has been reported.

Successful exploitation could allow an attacker to access unauthorized files or directories on the affected system, potentially leading to information disclosure or disruption of service. The CVSS vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, and scope change with high impact on availability but no impact on confidentiality or integrity. No known exploits are currently active in the wild.

No official patch or remediation guidance is currently available from Adobe. Organizations should monitor Adobe's advisories for updates and consider implementing compensating controls such as restricting network access to ColdFusion servers and applying strict file system permissions to limit potential exposure until a fix is released.