CVE-2026-48375
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk45th percentile - higher than 45% of all known CVEs
Summary
ColdFusion is affected by an Incorrect Authorization vulnerability that could result in an application denial-of-service. A low-privileged attacker could exploit this to crash the application, leading to a denial-of-service condition. Exploitation does not require user interaction.
Risk Assessment
The risk of application crashes and service unavailability may impact critical business operations.
Recommendation
Install the latest security patches for ColdFusion and monitor the system for unusual behavior.
Original NVD description (English source)
ColdFusion is affected by an Incorrect Authorization vulnerability that could result in an application denial-of-service. A low-privileged attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.