← Back to CVE search

CVE-2026-48327

ColdFusion

Description

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed.

CVSS 9EPSS 0.371%Risk 0.93
View source
Published
2026-07-14 21:16:59
Affected versions
unknown
Type
Critical software
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H