VDB
CVE-2026-47929
CVE-2026-47929
PUBLISHED
CVSS 8.4 HIGH
Reported by adobe · Published June 9, 2026
ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A high-privileged attacker could exploit this vulnerability to gain elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed.
Risk Scores
CVSS 3.1
8.4
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Adobe | ColdFusion | 0 |
| Adobe | ColdFusion | 0, 0, 0 |
Timeline
- Jun 9, 2026 CVE Published
- Jun 10, 2026 Coalition ESS Score
- Jun 12, 2026 Security Advisory