CVE-2026-106090

ColdFusion is affected by an Incorrect Authorization vulnerability (CWE-863). A low-privileged attacker could exploit this flaw to achieve arbitrary code execution within the context of the current user. This vulnerability does not require any user interaction. While the documentation confirms th...

CVE-2026-75994 ColdFusion | Incorrect Authorization (CWE-863)

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. The vulnerable component is restricted to an administrative network zone by...

CVE-2026-106090 ColdFusion | Incorrect Authorization (CWE-863)

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction...

CVE-2026-106612

Adobe ColdFusion is affected by an Incorrect Authorization vulnerability (CWE-863) that can lead to arbitrary code execution within the context of the current user. A low-privileged attacker can exploit this flaw without requiring any user interaction. The CVSS 3.1 score is 9.9 (CRITICAL) with a ...

CVE-2026-106612 ColdFusion | Incorrect Authorization (CWE-863)

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction...

CVE-2026-106615 ColdFusion | Incorrect Authorization (CWE-863)

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction...

CVE-2026-106615

Adobe ColdFusion is affected by an Incorrect Authorization vulnerability (CWE-863 ) that allows a low-privileged attacker to achieve arbitrary code execution within the context of the current user. This vulnerability can be exploited without any user interaction. The provided documents do not spe...

CVE-2026-75995

ColdFusion is impacted by an Improper Input Validation vulnerability (CWE-20). An attacker with high privileges can exploit this flaw to achieve arbitrary code execution within the context of the current user. While the vulnerable component is restricted to an administrative network zone by defau...

CVE-2026-75995 ColdFusion | Improper Input Validation (CWE-20)

ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. The vulnerable component is restricted to an...

CVE-2026-105901

Adobe ColdFusion is affected by an Incorrect Authorization vulnerability (CWE-863) that allows a low-privileged attacker to achieve arbitrary code execution in the context of the current user. This vulnerability does not require user interaction and results in a change of scope. No specific techn...

CVE-2026-71385

Adobe ColdFusion is affected by an Incorrect Authorization vulnerability (CWE-863) that could allow an attacker with high privileges to execute arbitrary code in the context of the current user. The vulnerable component is restricted to an administrative network zone by default, and exploitation ...

CVE-2026-71385 ColdFusion | Incorrect Authorization (CWE-863)

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. The vulnerable component is restricted to an...

CVE-2026-105899

Adobe ColdFusion is affected by an Unrestricted Upload of File with Dangerous Type vulnerability (CWE-434). This flaw allows an attacker to upload files that could result in arbitrary code execution within the context of the current user. Exploitation of this vulnerability does not require user i...

CVE-2026-105899 ColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434)

ColdFusion is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user...

CVE-2026-106617

ColdFusion is affected by an Incorrect Authorization vulnerability (CWE-863) that could allow a low-privileged attacker to achieve arbitrary code execution in the context of the current user. This vulnerability does not require user interaction. Specific technical details regarding the affected c...

CVE-2026-106617 ColdFusion | Incorrect Authorization (CWE-863)

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction...

CVE-2026-90532

Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user...

CVE-2026-48382

Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user...

CVE-2026-106626

Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not...

CVE-2026-105895

Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require use...