CVE-2026-48375

EUVD-2026-56545 · Published Aug 11, 2026

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in an application denial-of-service. A low-privileged attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.

Technologies

Adobe Coldfusion

Weaknesses

CWE-863

CVSS scores

v3.16.5CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access

T1190Exploit Public-Facing Application

References

https://helpx.adobe.com/security/products/coldfusion/apsb26-90.html

Potentially impacted assets

See if this affects your attack surface