CVE-2026-106612 ColdFusion | Incorrect Authorization (CWE-863)

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction...

EUVD-2026-100510

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction...

CVE-2026-106612 ColdFusion | Incorrect Authorization (CWE-863)

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction...

CVE-2026-76001 ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)

ColdFusion is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploit depends on conditions beyond the attacker's control. Exploitation...

CVE-2026-76001

Adobe ColdFusion is impacted by a Server-Side Request Forgery (SSRF) vulnerability (CWE-918). A low-privileged attacker could exploit this flaw to achieve privilege escalation by gaining unauthorized access to internal resources. The exploit is network-based, requires no user interaction, and dep...

CVE-2026-106612

Adobe ColdFusion is affected by an Incorrect Authorization vulnerability (CWE-863) that can lead to arbitrary code execution within the context of the current user. A low-privileged attacker can exploit this flaw without requiring any user interaction. The CVSS 3.1 score is 9.9 (CRITICAL) with a ...

CVE-2026-106615 ColdFusion | Incorrect Authorization (CWE-863)

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction...

CVE-2026-106615

Adobe ColdFusion is affected by an Incorrect Authorization vulnerability (CWE-863 ) that allows a low-privileged attacker to achieve arbitrary code execution within the context of the current user. This vulnerability can be exploited without any user interaction. The provided documents do not spe...

CVE-2026-75995

ColdFusion is impacted by an Improper Input Validation vulnerability (CWE-20). An attacker with high privileges can exploit this flaw to achieve arbitrary code execution within the context of the current user. While the vulnerable component is restricted to an administrative network zone by defau...

CVE-2026-75995 ColdFusion | Improper Input Validation (CWE-20)

ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. The vulnerable component is restricted to an...

CVE-2026-75748

ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability (CWE-918) that can lead to privilege escalation . An attacker with high privileges can exploit this issue without user interaction to gain elevated access to internal resources . While the specific component or file caus...

CVE-2026-75748 ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)

ColdFusion is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation. An attacker with high privileges could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user interaction. Scop...

CVE-2026-105900 ColdFusion | Improper Input Validation (CWE-20)

ColdFusion is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction...

CVE-2026-105900

The ColdFusion application is affected by an Improper Input Validation vulnerability (CWE-20). An attacker can exploit this flaw to crash the application, resulting in a denial-of-service (DoS) condition. Exploitation of this vulnerability does not require any user interaction. No specific detail...

CVE-2026-71385

Adobe ColdFusion is affected by an Incorrect Authorization vulnerability (CWE-863) that could allow an attacker with high privileges to execute arbitrary code in the context of the current user. The vulnerable component is restricted to an administrative network zone by default, and exploitation ...

CVE-2026-105901

Adobe ColdFusion is affected by an Incorrect Authorization vulnerability (CWE-863) that allows a low-privileged attacker to achieve arbitrary code execution in the context of the current user. This vulnerability does not require user interaction and results in a change of scope. No specific techn...

CVE-2026-71385 ColdFusion | Incorrect Authorization (CWE-863)

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. The vulnerable component is restricted to an...

CVE-2026-105901 ColdFusion | Incorrect Authorization (CWE-863)

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction...

CVE-2026-106623

The ColdFusion platform is affected by an Incorrect Authorization vulnerability (CWE-863) that allows an attacker to disclose sensitive memory information. The vulnerability is exploitable over the network without requiring any user interaction. While the documents confirm the high confidentialit...

CVE-2026-106623 ColdFusion | Incorrect Authorization (CWE-863)

ColdFusion is affected by an Incorrect Authorization vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue does not require user interaction...