VYPR
Get started
← All advisories
Critical severity9.3NVD Advisory· Published Apr 14, 2026· Updated Apr 16, 2026

CVE-2026-27304

CVE-2026-27304

Description

ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction.

Affected products

26
  • Adobe Inc./Coldfusion26 versions
    cpe:2.3:a:adobe:coldfusion:2023:-:*:*:*:*:*:*+ 25 more
    • cpe:2.3:a:adobe:coldfusion:2023:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2023:update1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2023:update10:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2023:update11:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2023:update12:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2023:update13:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2023:update14:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2023:update15:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2023:update16:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2023:update17:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2023:update18:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2023:update2:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2023:update3:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2023:update4:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2023:update5:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2023:update6:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2023:update7:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2023:update8:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2023:update9:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2025:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2025:update1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2025:update2:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2025:update3:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2025:update4:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2025:update5:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2025:update6:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.