AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

AdobeCVE-2026-83961

Adobe ColdFusion: improper authentication

Adobe

CVE-2026-83961 · Published Sep 3, 2026 · updated Sep 9, 2026

High7.1
No fix yet
Adobe advisory

ColdFusion is affected by an Improper Authentication vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain limited read and write access. The vulnerable component is restricted to an administrative network zone by default. Exploitation of this issue does not require user interaction. Scope is changed.

Affected versions

PackageAffectedFixed in
ColdFusion 2023
Product
<= 2023.0.22No fix yet
ColdFusion 2025
Product
<= 2025.0.11No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-287

More Adobe advisories

All Adobe