9.1

CVE-2026-47929

Medienbericht

ColdFusion | Incorrect Authorization (CWE-863)

ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A high-privileged attacker could exploit this vulnerability to gain elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Adobe ≫ Coldfusion Version2023 Update-
Adobe ≫ Coldfusion Version2023 Updateupdate1
Adobe ≫ Coldfusion Version2023 Updateupdate10
Adobe ≫ Coldfusion Version2023 Updateupdate11
Adobe ≫ Coldfusion Version2023 Updateupdate12
Adobe ≫ Coldfusion Version2023 Updateupdate13
Adobe ≫ Coldfusion Version2023 Updateupdate14
Adobe ≫ Coldfusion Version2023 Updateupdate15
Adobe ≫ Coldfusion Version2023 Updateupdate16
Adobe ≫ Coldfusion Version2023 Updateupdate17
Adobe ≫ Coldfusion Version2023 Updateupdate18
Adobe ≫ Coldfusion Version2023 Updateupdate19
Adobe ≫ Coldfusion Version2023 Updateupdate2
Adobe ≫ Coldfusion Version2023 Updateupdate3
Adobe ≫ Coldfusion Version2023 Updateupdate4
Adobe ≫ Coldfusion Version2023 Updateupdate5
Adobe ≫ Coldfusion Version2023 Updateupdate6
Adobe ≫ Coldfusion Version2023 Updateupdate7
Adobe ≫ Coldfusion Version2023 Updateupdate8
Adobe ≫ Coldfusion Version2023 Updateupdate9
Adobe ≫ Coldfusion Version2025 Update-
Adobe ≫ Coldfusion Version2025 Updateupdate1
Adobe ≫ Coldfusion Version2025 Updateupdate2
Adobe ≫ Coldfusion Version2025 Updateupdate3
Adobe ≫ Coldfusion Version2025 Updateupdate4
Adobe ≫ Coldfusion Version2025 Updateupdate5
Adobe ≫ Coldfusion Version2025 Updateupdate6
Adobe ≫ Coldfusion Version2025 Updateupdate7
Adobe ≫ Coldfusion Version2025 Updateupdate8
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 7.54% 0.937
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.1 2.3 6
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
psirt@adobe.com 8.4 1.7 6
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CWE-863 Incorrect Authorization

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
10.06.2026 09:43
https://helpx.adobe.com/security/products/coldfusion/apsb26-64.html
Vendor Advisory