Incorrect Authorization Vulnerability in Adobe ColdFusion

CVE-2026-106090

What is CVE-2026-106090?

Adobe ColdFusion is exposed to an Incorrect Authorization vulnerability that could enable an attacker to execute arbitrary code within the context of the authenticated user. This means that even low-privileged attackers have the potential to exploit the flaw without needing any user interaction. As a result, the scope of operations that can be performed by the attacker is significantly broadened. Organizations using affected versions of ColdFusion are encouraged to review security advisories and apply necessary patches to mitigate the risk.

References