VYPR
← All advisories
Low severity2.4NVD Advisory· Published Apr 14, 2026· Updated Apr 16, 2026

CVE-2026-27308

CVE-2026-27308

Description

ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. A high-privileged attacker could exploit this vulnerability and exhaust system resources, reducing application speed. Exploitation of this issue does not require user interaction.

Affected products

26
  • Adobe Inc./Coldfusion26 versions
    cpe:2.3:a:adobe:coldfusion:2023:-:*:*:*:*:*:*+ 25 more
    • cpe:2.3:a:adobe:coldfusion:2023:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2023:update1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2023:update10:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2023:update11:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2023:update12:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2023:update13:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2023:update14:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2023:update15:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2023:update16:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2023:update17:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2023:update18:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2023:update2:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2023:update3:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2023:update4:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2023:update5:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2023:update6:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2023:update7:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2023:update8:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2023:update9:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2025:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2025:update1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2025:update2:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2025:update3:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2025:update4:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2025:update5:*:*:*:*:*:*
    • cpe:2.3:a:adobe:coldfusion:2025:update6:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.