CVE-2026-47932

CVE-2026-47932 affects ColdFusion versions 2023.19, 2025.8 and earlier. It describes an Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) that can bypass a security feature and allow access to unauthorized files or directories outside intended restrictions. The exploita...

EUVD-2026-35833

ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A high-privileged attacker could exploit this vulnerability to gain elevated access or control over the victim...

CVE-2026-47930

CVE-2026-47930 affects ColdFusion versions 2023.19, 2025.8 and earlier. The issue is an Improper Input Validation vulnerability that allows a low-privileged attacker to bypass security measures and gain unauthorized read and write access, with exploitation not requiring user interaction. The CVSS...