Vulnerabilities

ColdFusion is affected by an Incorrect Authorization vulnerability that could lead to disclosure of sensitive memory.

ColdFusion is affected by an Incorrect Authorization vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue does not require user interaction.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

Adobe

Product

coldfusion

CVSS

7.5

Exposure class

Web platform

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-106623 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 23
   CVE NVD 18d ago

   ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.

   CVSS 9.6 CVE-2026-75994 Adobe
2. 15
   CVE NVD 18d ago

   ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.

   CVSS 8.4 CVE-2026-71385 Adobe
3. 23
   CVE NVD 18d ago

   ColdFusion is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass.

   CVSS 9.6 CVE-2026-106620 Adobe
4. 15
   CVE NVD 18d ago

   ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.

   CVSS 8.8 CVE-2026-106618 Adobe
5. 15
   CVE NVD 18d ago

   ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.

   CVSS 8.8 CVE-2026-106617 Adobe
6. 15
   CVE NVD 18d ago

   ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.

   CVSS 8.8 CVE-2026-106615 Adobe
7. 15
   CVE NVD 18d ago

   ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.

   CVSS 7.8 CVE-2026-106614 Adobe
8. 23
   CVE NVD 18d ago

   ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.

   CVSS 9.9 CVE-2026-106612 Adobe
9. 15
   CVE NVD 18d ago

   ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.

   CVSS 8.8 CVE-2026-106090 Adobe
10. 15
    CVE NVD 18d ago

    ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.

    CVSS 8.8 CVE-2026-106089 Adobe
11. 15
    CVE NVD 18d ago

    ColdFusion is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass.

    CVSS 7.7 CVE-2026-105994 Adobe
12. 15
    CVE NVD 18d ago

    ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.

    CVSS 8.8 CVE-2026-105901 Adobe
13. 15
    CVE NVD 18d ago

    ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.

    CVSS 8.2 CVE-2026-105898 Adobe