p PatchFirst

CVE-2026-105994

CVE-2026-105994 · ColdFusion | Incorrect Authorization (CWE-863)

Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction. Scope is changed.

CVSS 7.7 · Alta · EPSS 0,3% · Corrección disponible

Publicación
Actualización

Productos y versiones afectados

  • coldfusion 2025

    Versiones
    • ≥ 0, ≤ 2025.0.13: Afectada (custom)
    • 2025.0.14: No afectada (custom)

    Actualiza a 2025.0.14

  • coldfusion 2023

    Versiones
    • ≥ 0, ≤ 2023.0.25: Afectada (custom)
    • 2023.0.26: No afectada (custom)

    Actualiza a 2023.0.26

Fuentes originales

Comprueba tu servidor →