CVE-2026-106623
HIGH
CVSS 7.5
Published: 2026-10-13
Modified: 2026-10-14
Tenable Plugin
Checking the public Tenable catalog…
Threat Intelligence Pending
IOCs, MITRE ATT&CK techniques, and attack chain data are being generated. Refresh in a few seconds.
Description
ColdFusion is affected by an Incorrect Authorization vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue does not require user interaction.
Quick Facts
| CVE ID | CVE-2026-106623 |
| CVSS Score | 7.5 |
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| Published | 2026-10-13 |
| Exploited | No |
| CISA KEV | No |
| PoC | Not public |