{"id":"CVE-2026-75994","published":"2026-10-13T21:18:20.380","lastModified":"2026-10-14T15:50:50.180","description":"ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. The vulnerable component is restricted to an administrative network zone by default. Exploitation of this issue does not require user interaction. Scope is changed.","cvssScore":9.6,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-863"],"vendors":[],"products":[],"references":[{"url":"https://www.adobe.com/trust/security/products/coldfusion/apsb26-144.html","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"ColdFusion contains an Incorrect Authorization vulnerability (CWE-863) that allows attackers to execute arbitrary code in the context of the current user. This critical flaw enables remote code execution without user interaction, potentially leading to full system compromise when exploited within the administrative network zone.","exploitability":"Exploitation is relatively straightforward as it requires no user interaction and can be executed from an administrative network zone, though it may require initial access to that restricted network segment.","blast_radius":"If exploited, this vulnerability could allow attackers to execute arbitrary code on the ColdFusion server with the privileges of the current user, potentially leading to complete system compromise and lateral movement within the administrative network.","remediation":"Upgrade to ColdFusion 2023.0.15 or later, as this version includes the fix for CVE-2026-75994.","detection":"Monitor for unauthorized API calls or administrative requests to ColdFusion management interfaces from unexpected network segments, particularly looking for unusual authentication patterns or elevated privilege usage in application logs.","tags":["rce","auth-bypass","web","admin-zone"],"model":"garnet-coder","analyzedAt":"2026-10-15T08:54:03.821Z"}}