CVE-2026-106623: ColdFusion | Incorrect Authorization (CWE-863)
Published Oct 13, 2026
·Updated
ColdFusion is affected by an Incorrect Authorization vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue does not require user interaction.
Affected Software
1 affected component
Adobe ColdFusion
Event History
Oct 13, 2026
CVE Published
via MITRE·08:21 PM
Data Sourced
via MITRE·08:21 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What access and conditions does an attacker need to exploit this issue?
The vulnerability has a network attack vector, low attack complexity, and requires no privileges or user interaction. Systems running the affected ColdFusion product that are reachable by an attacker should be prioritized for remediation.