CVE-2026-27306 - Vulnerability Analysis

Overview

ColdFusion <= 2023.18, 2025.6 contains an improper input validation vulnerability that allows attackers with elevated privileges to execute arbitrary code, exploit requires victim to open a malicious file.

Severity & Score

Impact

Attackers with elevated privileges can execute arbitrary code, potentially leading to full system compromise.

Mitigation

Update to the latest version beyond 2023.18 and 2025.6.

References

• https://helpx.adobe.com/security/products/coldfusion/apsb26-38.html

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner