CVE-2026-71383: adobe coldfusion Incorrect Authorization

Vulnerability summary

CVE-2026-71383 is a high (CVSS 7.3) Incorrect Authorization vulnerability in adobe coldfusion. EPSS estimates a 0.59% chance of exploitation in the next 30 days, higher than 47% of scored vulnerabilities.

Timeline

1. 11-08-2026
   PublishedVulnerability first disclosed.
2. 27-08-2026
   Last modifiedVulnerability information updated.

Description

is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized read and write access, causing a limited disruption to availability. Exploitation of this issue does not require user interaction.

• CWE-863Incorrect AuthorizationThe product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.