CVE-2026-48385 ColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)

ColdFusion is affected by an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write...

CVE-2026-48385

ColdFusion is affected by an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write...

EUVD-2026-56548

is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized read and write access, causing a limited disruption to availability. Exploitation of this...

CVE-2026-71383

CVE-2026-71383 affects Adobe ColdFusion (via an Incorrect Authorization vulnerability) allowing a network attacker with no privileges and no user interaction to bypass security controls and gain limited unauthorized read and write access, plus a small impact to availability. Documents indicate ro...

EUVD-2026-56547

is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and limited write access. Exploitation of this issue does not require user interaction...

CVE-2026-21279

The CVE-2026-21279 entry concerns Adobe ColdFusion (per CVE records) and describes an Improper Input Validation vulnerability that enables a Security feature bypass. The root cause is input validation failure allowing an attacker to bypass protections and gain unauthorized read access and limited...

CVE-2026-21279

is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and limited write access. Exploitation of this issue does not require user interaction...

CVE-2026-21279 ColdFusion | Improper Input Validation (CWE-20)

is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and limited write access. Exploitation of this issue does not require user interaction...

EUVD-2026-56543

is affected by an Improper Encoding or Escaping of Output vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized write access, causing a limited disruption to availability...

CVE-2026-71384

Adobe ColdFusion is affected by CVE-2026-71384, an Incorrect Authorization vulnerability (CWE-863) that could bypass security features and grant unauthorized read/write access, potentially causing application denial-of-service. The vulnerable component is restricted to an administrative network z...

Visual Studio Code Security Feature Bypass Vulnerability

Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...

Active Directory Security Feature Bypass Vulnerability

Inadequate encryption strength in Windows Active Directory allows an authorized attacker to bypass a security feature over a network...

Microsoft PowerShell Security Feature Bypass Vulnerability

Improper control of generation of code 'code injection' in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally...

Microsoft Exchange Server Security Feature Bypass Vulnerability

Missing authorization in Microsoft Exchange Server allows an authorized attacker to bypass a security feature over a network...

Visual Studio Code Python Extension Security Feature Bypass Vulnerability

Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature locally...

Windows Schannel Security Feature Bypass Vulnerability

Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to bypass a security feature over a network...

Visual Studio Code Security Feature Bypass Vulnerability

Not failing securely 'failing open' in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

Windows Defender Firewall Service Security Feature Bypass Vulnerability

Missing authorization in Windows Defender Firewall Service allows an authorized attacker to bypass a security feature locally...

CoPilot Chat Security Feature Bypass Vulnerability

No cwe for this issue in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to bypass a security feature over a network...

.NET Security Feature Bypass Vulnerability

Inconsistent interpretation of http requests 'http request/response smuggling' in .NET allows an unauthorized attacker to bypass a security feature over a network...