CVE-2026-83961

7.1 highEPSS 0.4%

High (7.1) in adobe coldfusion. EPSS 0.4% chance of exploitation in the next 30 days.

ColdFusion is affected by an Improper Authentication vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain limited read and write access. The vulnerable component is restricted to an administrative network zone by default. Exploitation of this issue does not require user interaction. Scope is changed.

Severity

CVSS 3.1

7.1 high

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 36% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2026-09-03
Modified: 2026-09-09
Record from: the NVD, synced 2026-10-19

Affected

adobe:coldfusion

References

https://helpx.adobe.com/security/products/coldfusion/apsb26-90.html

Check your stack JSON