Incorrect Authorization Vulnerability in Adobe ColdFusion

CVE-2026-105994

What is CVE-2026-105994?

Adobe ColdFusion has a security vulnerability that arises from incorrect authorization mechanisms, allowing low-privileged attackers to bypass existing security measures. This flaw enables unauthorized write access without requiring any user interaction, which can compromise the integrity of applications utilizing ColdFusion. The potential exploitation of this vulnerability represents a significant risk to the security posture of affected systems, as it alters the intended scope of access controls.

References