CVE-2026-106615 ColdFusion | Incorrect Authorization (CWE-863)

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction...

CVE-2026-106615

Adobe ColdFusion is affected by an Incorrect Authorization vulnerability (CWE-863 ) that allows a low-privileged attacker to achieve arbitrary code execution within the context of the current user. This vulnerability can be exploited without any user interaction. The provided documents do not spe...

CVE-2026-75995 ColdFusion | Improper Input Validation (CWE-20)

ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. The vulnerable component is restricted to an...

CVE-2026-75995

ColdFusion is impacted by an Improper Input Validation vulnerability (CWE-20). An attacker with high privileges can exploit this flaw to achieve arbitrary code execution within the context of the current user. While the vulnerable component is restricted to an administrative network zone by defau...

CVE-2026-71385

Adobe ColdFusion is affected by an Incorrect Authorization vulnerability (CWE-863) that could allow an attacker with high privileges to execute arbitrary code in the context of the current user. The vulnerable component is restricted to an administrative network zone by default, and exploitation ...

CVE-2026-71385 ColdFusion | Incorrect Authorization (CWE-863)

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. The vulnerable component is restricted to an...

CVE-2026-105901

Adobe ColdFusion is affected by an Incorrect Authorization vulnerability (CWE-863) that allows a low-privileged attacker to achieve arbitrary code execution in the context of the current user. This vulnerability does not require user interaction and results in a change of scope. No specific techn...

CVE-2026-105899 ColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434)

ColdFusion is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user...

CVE-2026-105899

Adobe ColdFusion is affected by an Unrestricted Upload of File with Dangerous Type vulnerability (CWE-434). This flaw allows an attacker to upload files that could result in arbitrary code execution within the context of the current user. Exploitation of this vulnerability does not require user i...

CVE-2026-106617

ColdFusion is affected by an Incorrect Authorization vulnerability (CWE-863) that could allow a low-privileged attacker to achieve arbitrary code execution in the context of the current user. This vulnerability does not require user interaction. Specific technical details regarding the affected c...

CVE-2026-106617 ColdFusion | Incorrect Authorization (CWE-863)

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction...

CVE-2026-90532

Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user...

CVE-2026-48382

Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user...

CVE-2026-106626

Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not...

CVE-2026-105895

Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require use...

CVE-2026-103854

Dimension is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-103848

Adobe Experience Manager is affected by an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute...

CVE-2026-103846

Dimension is affected by an Improper Neutralization of Input During Web Page Generation vulnerability that could result in arbitrary code execution in the context of the current user. A local attacker with user permissions could exploit this vulnerability to execute arbitrary code. Exploitation o...

CVE-2026-103847

Dimension is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. A local attacker with user permissions could exploit this vulnerability to...

CVE-2026-103851

Substance3D - Stager is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...