← CVE Intelligence

CVE-2026-21279

ColdFusion | Improper Input Validation (CWE-20) PUBLISHED

Description (CNA)

is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and limited write access. Exploitation of this issue does not require user interaction.

Affected (CNA)

Vendor / productVersions
Adobe / ColdFusion 2025affected 0 through 2025.0.11; unaffected 2025.0.12
Adobe / ColdFusion 2023affected 0 through 2023.0.22; unaffected 2023.0.23

CWE

CWE-20

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.