CVE-2026-71383: ColdFusion | Incorrect Authorization (CWE-863)
is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized read and write access, causing a limited disruption to availability. Exploitation of this issue does not require user interaction.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2026-71383?
CVE-2026-71383 has a high severity score of 7.3.
What vulnerability type is CVE-2026-71383?
CVE-2026-71383 is classified as an Incorrect Authorization vulnerability, also known as CWE-863.
What potential impact does CVE-2026-71383 have?
Exploitation of CVE-2026-71383 could allow attackers to bypass security measures and gain limited unauthorized read and write access.
How can I mitigate CVE-2026-71383?
To mitigate CVE-2026-71383, ensure that all access controls are correctly implemented and regularly tested for effectiveness.
Is CVE-2026-71383 a remote exploitation vulnerability?
Yes, CVE-2026-71383 can be exploited remotely since it is classified with an attack vector of AV:N.