CVE-2026-75998

Katalog CVE

CVSS 7.5 · High EPSS 0,82%

Kerentanan Improper Access Control pada adobe coldfusion. Skor CVSS 3.1 7.5 (High) menurut adobe.com.

Deskripsi (NVD)

ColdFusion is affected by an Improper Access Control vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction.

Rincian

Terbit di NVD

8 September 2026

Terakhir diubah

18 September 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber adobe.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-284: Improper Access Control

EPSS (30 hari)

0,82% peluang dieksploitasi; lebih tinggi dari 56,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://helpx.adobe.com/security/products/coldfusion/apsb26-119.html advisory vendor