CVE-2026-71383: ColdFusion | Incorrect Authorization (CWE-863)
is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized read and write access, causing a limited disruption to availability. Exploitation of this issue does not require user interaction.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-71383?
CVE-2026-71383 has a high severity score of 7.3.
What vulnerability type is CVE-2026-71383?
CVE-2026-71383 is classified as an Incorrect Authorization vulnerability, also known as CWE-863.
What potential impact does CVE-2026-71383 have?
Exploitation of CVE-2026-71383 could allow attackers to bypass security measures and gain limited unauthorized read and write access.
How can I mitigate CVE-2026-71383?
To mitigate CVE-2026-71383, ensure that all access controls are correctly implemented and regularly tested for effectiveness.
Is CVE-2026-71383 a remote exploitation vulnerability?
Yes, CVE-2026-71383 can be exploited remotely since it is classified with an attack vector of AV:N.