CVE-2026-25652

is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain unauthorized read and write access. Exploitation of this issue does not require user interaction.

Score

CVSS 3.1 7.8 High

Status

Analyzed - psirt@adobe.com

Published

2026-08-11

Last modified

2026-08-27

Weaknesses

CWE-863

Affected products

• Coldfusion (Adobe)
• Coldfusion 2023 (Adobe)
• Coldfusion 2025 (Adobe)

References

• https://helpx.adobe.com/security/products/coldfusion/apsb26-90.html