https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 23:37:08 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-08385 bdu:2026-08385 https://cve.radiocsirt.org/vuln/bdu:2026-08385 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0720 certfr-2026-avi-0720 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0720 https://cve.radiocsirt.org/vuln/euvd-2026-360793 EUVD-2026-360793 https://cve.radiocsirt.org/vuln/euvd-2026-360793 https://cve.radiocsirt.org/vuln/fkie_cve-2026-47929 <p>ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A high-privileged attacker could exploit this vulnerability to gain elevated access or control over the victim&#39;s account or session. The vulnerable component is restricted to an administrative network zone by default. Exploitation of this issue does not require user interaction. Scope is changed.</p> <p>ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A high-privileged attacker could exploit this vulnerability to gain elevated access or control over the victim&#39;s account or session. The vulnerable component is restricted to an administrative network zone by default. Exploitation of this issue does not require user interaction. Scope is changed.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-47929 https://cve.radiocsirt.org/vuln/ghsa-f6w2-335h-mp8w <p>ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A high-privileged attacker could exploit this vulnerability to gain elevated access or control over the victim&#39;s account or session. Exploitation of this issue does not require user interaction. Scope is changed.</p> <p>ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A high-privileged attacker could exploit this vulnerability to gain elevated access or control over the victim&#39;s account or session. Exploitation of this issue does not require user interaction. Scope is changed.</p> https://cve.radiocsirt.org/vuln/ghsa-f6w2-335h-mp8w https://cve.radiocsirt.org/vuln/ncsc-2026-0191 NCSC-2026-0191 https://cve.radiocsirt.org/vuln/ncsc-2026-0191 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1858 <p>Ein Angreifer kann mehrere Schwachstellen in Adobe ColdFusion ausnutzen, um beliebigen Programmcode auszuführen, Berechtigungen zu erweitern, Sicherheitsmaßnahmen zu umgehen, sensible Daten offenzulegen und Cross-Site-Scripting-Angriffe durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Adobe ColdFusion ausnutzen, um beliebigen Programmcode auszuführen, Berechtigungen zu erweitern, Sicherheitsmaßnahmen zu umgehen, sensible Daten offenzulegen und Cross-Site-Scripting-Angriffe durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1858