CRITICAL 9.6 CVE-2026-106620 Published 13 Oct 2026

ColdFusion Incorrect Authorization Security Bypass Vulnerability

Worried this affects your website?

Adobe ColdFusion is affected by an Incorrect Authorization vulnerability that could result in a security feature bypass.

A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation does not require user interaction.

  • Low-privileged attacker required
  • No user interaction required
  • Scope is changed

Reference: CVE-2026-106620 on NVD

← Back to Security News