CVE-2026-48327: ColdFusion | Incorrect Authorization (CWE-863)
Published Jul 14, 2026
·Updated
ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed.
Affected Software
34 affected components
Adobe ColdFusion
Adobe ColdFusion=2023
Adobe ColdFusion=2023-update1
Adobe ColdFusion=2023-update10
Adobe ColdFusion=2023-update11
Adobe ColdFusion=2023-update12
Adobe ColdFusion=2023-update13
Adobe ColdFusion=2023-update14
Adobe ColdFusion=2023-update15
Adobe ColdFusion=2023-update16
Adobe ColdFusion=2023-update17
Adobe ColdFusion=2023-update18
Adobe ColdFusion=2023-update19
Adobe ColdFusion=2023-update2
Adobe ColdFusion=2023-update20
Adobe ColdFusion=2023-update21
Adobe ColdFusion=2023-update3
Adobe ColdFusion=2023-update4
Adobe ColdFusion=2023-update5
Adobe ColdFusion=2023-update6
Adobe ColdFusion=2023-update7
Adobe ColdFusion=2023-update8
Adobe ColdFusion=2023-update9
Adobe ColdFusion=2025
Adobe ColdFusion=2025-update1
Adobe ColdFusion=2025-update10
Adobe ColdFusion=2025-update2
Adobe ColdFusion=2025-update3
Adobe ColdFusion=2025-update4
Adobe ColdFusion=2025-update5
Adobe ColdFusion=2025-update6
Adobe ColdFusion=2025-update7
Adobe ColdFusion=2025-update8
Adobe ColdFusion=2025-update9
Event History
Jul 14, 2026
CVE Published
via MITRE·09:04 PM
Data Sourced
via MITRE·09:04 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-48327?
CVE-2026-48327 has a severity rating of critical, with a score of 9.
2
What vulnerability type is associated with CVE-2026-48327?
CVE-2026-48327 is associated with an Incorrect Authorization vulnerability, classified under CWE-863.
3
What impact does CVE-2026-48327 have on Adobe ColdFusion?
CVE-2026-48327 could result in arbitrary code execution in the context of the current user.
4
Does CVE-2026-48327 require user interaction for exploitation?
Exploitation of CVE-2026-48327 does not require any user interaction.
5
What is the scope of the vulnerability CVE-2026-48327?
The scope is changed, indicating the potential for increased impact on the affected system.