Improper Authentication Vulnerability in ColdFusion by Adobe
CVE-2026-83961

7.1HIGH

Key Information:

Vendor

Adobe
Status
Coldfusion 2025
Coldfusion 2023
Vendor
CVE Published:
3 September 2026

What is CVE-2026-83961?

ColdFusion is vulnerable to an improper authentication exploit that enables attackers to escalate privileges, ultimately allowing limited read and write access. While the vulnerable components are by default contained within an administrative network zone, attackers can exploit this vulnerability without requiring user interaction. This issue could lead to unauthorized access and manipulation of sensitive data.

Affected Version(s)

ColdFusion 2023 0 <= 2023.0.22

ColdFusion 2025 0 <= 2025.0.11

ColdFusion 2023 2023.0.23

References

https://helpx.adobe.com/security/products/coldfusion/apsb...
vendor-advisory

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.