CVE-2026-47932

The flaw

ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a Security feature bypass. An attacker could leverage this

What to do

Review advisory and patch per vendor guidance.

References