CVE-2026-48375: ColdFusion | Incorrect Authorization (CWE-863)
Published Aug 11, 2026
·Updated
ColdFusion is affected by an Incorrect Authorization vulnerability that could result in an application denial-of-service. A low-privileged attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.
Affected Software
36 affected components
Adobe ColdFusion
Adobe ColdFusion=2023
Adobe ColdFusion=2023-update1
Adobe ColdFusion=2023-update10
Adobe ColdFusion=2023-update11
Adobe ColdFusion=2023-update12
Adobe ColdFusion=2023-update13
Adobe ColdFusion=2023-update14
Adobe ColdFusion=2023-update15
Adobe ColdFusion=2023-update16
Adobe ColdFusion=2023-update17
Adobe ColdFusion=2023-update18
Adobe ColdFusion=2023-update19
Adobe ColdFusion=2023-update2
Adobe ColdFusion=2023-update20
Adobe ColdFusion=2023-update21
Adobe ColdFusion=2023-update22
Adobe ColdFusion=2023-update3
Adobe ColdFusion=2023-update4
Adobe ColdFusion=2023-update5
Adobe ColdFusion=2023-update6
Adobe ColdFusion=2023-update7
Adobe ColdFusion=2023-update8
Adobe ColdFusion=2023-update9
Adobe ColdFusion=2025
Adobe ColdFusion=2025-update1
Adobe ColdFusion=2025-update10
Adobe ColdFusion=2025-update11
Adobe ColdFusion=2025-update2
Adobe ColdFusion=2025-update3
Adobe ColdFusion=2025-update4
Adobe ColdFusion=2025-update5
Adobe ColdFusion=2025-update6
Adobe ColdFusion=2025-update7
Adobe ColdFusion=2025-update8
Adobe ColdFusion=2025-update9
Event History
Aug 11, 2026
CVE Published
via MITRE·04:31 PM
Data Sourced
via MITRE·04:31 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:17 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-48375?
The severity of CVE-2026-48375 is medium, rated at 6.5.
2
How do I fix CVE-2026-48375?
To fix CVE-2026-48375, apply the latest security updates provided by Adobe for ColdFusion.
3
What type of vulnerability is CVE-2026-48375?
CVE-2026-48375 is categorized as an Incorrect Authorization vulnerability.
4
What impact does CVE-2026-48375 have?
CVE-2026-48375 can result in a denial-of-service condition, allowing an attacker to crash the application.
5
Who is affected by CVE-2026-48375?
CVE-2026-48375 affects users of Adobe ColdFusion.