CVE-2026-47929

Name of the Vulnerable Software and Affected Versions ColdFusion versions 2023.19 and earlier ColdFusion versions 2025.8 and earlier

Description An incorrect authorization flaw allows a high-privileged attacker to achieve arbitrary code execution in the context of the current user. This issue enables the attacker to gain elevated access or control over the victim's account or session without requiring any user interaction.

Recommendations Update ColdFusion versions 2023.19 and earlier to a patched version. Update ColdFusion versions 2025.8 and earlier to a patched version.