CWE-20

Everything Threat Times has reported about CWE-20: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

Adobe ColdFusion Critical Flaw Allows Remote Code Execution Without User Interaction

Threat TimesOct 13, 2026

A critical improper input validation flaw in Adobe ColdFusion allows arbitrary code execution, affecting versions 2023 and 2025 up to specific patch levels.

Vulnerabilities

Adobe Experience Manager Critical Flaw Allows Code Execution Without User Interaction

Threat TimesOct 13, 2026

A critical vulnerability in Adobe Experience Manager versions up to 6.5.25 permits arbitrary code execution without requiring any user interaction, posing severe risks to enterprise content management systems.