Improper Input Validation in Adobe ColdFusion

CVE-2026-21273

What is CVE-2026-21273?

Adobe ColdFusion is susceptible to an Improper Input Validation vulnerability, which may lead to privilege escalation. This issue allows a low-privileged attacker to exploit the flaw and potentially gain unauthorized read and write access to sensitive information. Notably, exploitation requires user interaction; the target must open a specially crafted file designed to activate the vulnerability. This creates an elevated risk, as the attacker's ability to manipulate user actions is essential for successful exploitation. For further details, please refer to the vendor's advisory.

References