CVE-2026-47929

Katalog CVE

CVSS 8.4 · High EPSS 0,45%

Kerentanan Incorrect Authorization pada adobe coldfusion. Skor CVSS 3.1 8.4 (High) menurut NVD.

Deskripsi (NVD)

ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A high-privileged attacker could exploit this vulnerability to gain elevated access or control over the victim's account or session. The vulnerable component is restricted to an administrative network zone by default. Exploitation of this issue does not require user interaction. Scope is changed.

Rincian

Terbit di NVD

9 Juni 2026

Terakhir diubah

28 Agustus 2026

Status NVD

Analyzed

CVSS 3.1

8.4 (High), sumber NVD
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-863: Incorrect Authorization

EPSS (30 hari)

0,45% peluang dieksploitasi; lebih tinggi dari 37,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://helpx.adobe.com/security/products/coldfusion/apsb26-64.html advisory vendor