Workbench is a suite of tools for administrators and developers to interact with Salesforce.com organizations via the Force.com APIs.

Code

The project this record applies to. Exploit listings stay in References.

• Repository · github.com

Timeline

Detection, updates, and resolution for this record.

1. Apr 6, 2026 · NIST NVD

   Detected

   Workbench is a suite of tools for administrators and developers to interact with Salesforce.com organizations via the Force.com APIs. Prior to 65.0.0, Workbench contains remote code execution vulnerability in the timezone conversion flow, which processes attacker-controlled cookie values in an unsafe manner. This vulnerability is fixed in 65.0.0.

2. Jul 24, 2026 · NIST NVD

   Updated

   Workbench is a suite of tools for administrators and developers to interact with Salesforce.com organizations via the Force.com APIs. Prior to 65.0.0, Workbench contains remote code execution vulnerability in the timezone conversion flow, which processes attacker-controlled cookie values in an unsafe manner. This vulnerability is fixed in 65.0.0.

Affected

• cpe forceworkbench/forceworkbenchversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-35178

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-35178

  Workbench is a suite of tools for administrators and developers to interact with Salesforce.com organizations via the Force.com APIs. Prior to 65.0.0, Workbench contains remote code execution vulnerability in the timezone conversion flow, which processes attacker-controlled cooki

  nvd.nist.gov

References

• Issue Tracking · github.com
• Vendor Advisory · github.com