Critical severity9.6NVD Advisory· Published Jun 9, 2026
CVE-2026-47928
CVE-2026-47928
Description
ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed.
Affected products
1- Range: <=2023.19, <=2025.8
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
1- Adobe Discloses 25 Vulnerabilities Across Multiple Products, Including Critical FlawsVypr Intelligence · Jun 9, 2026