CVE-2026-21273: ColdFusion | Improper Input Validation (CWE-20)
is affected by an Improper Input Validation vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain unauthorized read and write access. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Scope is changed.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-21273?
The severity of CVE-2026-21273 is high with a CVSS score of 8.7.
How do I fix CVE-2026-21273?
To fix CVE-2026-21273, update Adobe ColdFusion to the latest version provided by Adobe.
What type of vulnerability is CVE-2026-21273?
CVE-2026-21273 is classified as an improper input validation vulnerability.
What impact could CVE-2026-21273 have if exploited?
Exploiting CVE-2026-21273 could allow a low-privileged attacker to perform privilege escalation and gain unauthorized access.
What is required for an attacker to exploit CVE-2026-21273?
Exploitation of CVE-2026-21273 requires user interaction, specifically that a victim must open a malicious file.