CVE-2026-71384: ColdFusion | Incorrect Authorization (CWE-863)
is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access, potentially resulting in an application denial-of-service condition. The vulnerable component is restricted to an administrative network zone by default. Exploitation of this issue does not require user interaction. Scope is changed.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-71384?
The severity of CVE-2026-71384 is rated as critical with a score of 9.6.
How do I fix CVE-2026-71384?
To fix CVE-2026-71384, apply the latest security patches provided by Adobe for ColdFusion.
What type of vulnerability is CVE-2026-71384?
CVE-2026-71384 is classified as an Incorrect Authorization vulnerability (CWE-863).
What impact could CVE-2026-71384 have on my application?
CVE-2026-71384 could allow an attacker to bypass security measures resulting in unauthorized access and potential application denial-of-service.
What measures can I take to mitigate CVE-2026-71384?
To mitigate CVE-2026-71384, ensure that you are regularly updating your ColdFusion installations and following best security practices.