CVE-2026-47929

The flaw

ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A high-privileged attacker could exploit this vulnera

What to do

Review advisory and patch per vendor guidance.

References