CRITICAL
9.6 CVE-2026-106620 Published 13 Oct 2026
ColdFusion Incorrect Authorization Security Bypass Vulnerability
Worried this affects your website?
Adobe ColdFusion is affected by an Incorrect Authorization vulnerability that could result in a security feature bypass.
A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation does not require user interaction.
- Low-privileged attacker required
- No user interaction required
- Scope is changed
Reference: CVE-2026-106620 on NVD
← Back to Security News