Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. The vulnerable component is restricted to an administrative network zone by default. Exploitation of this issue does not require user interaction.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 1 product
| Date | Total | Labels |
|---|
| 2026-08-11 | 3 | Disclosure3 |
| 2026-08-12 | 1 | General1 |
#securityupdate #adobeupdate #adobe #ColdFusion つづき ・CVE-2026-71385 ・CVE-2026-71386 ・CVE-2026-71387
Post summary
The post simply lists three new Adobe ColdFusion CVEs with no additional information on exploits, patches, or technical details.
CVE-2026-71387 ColdFusion Incorrect Authorization Vulnerability Enables Arbitrary Code Execution https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-71387
Post summary
An incorrect authorization flaw in ColdFusion could lead to arbitrary code execution; no PoC, exploit, or patch details and no report of active exploitation are provided.
🚨*CVE* CVE-2026-71387 ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could… https://www.cve.org/CVERecord?id=CVE-2026-71387 ----- Traducción: CVE-2026-71387 Col… http://infoflow.cloud`
Post summary
The tweet announces CVE‑2026‑71387, describing it as an incorrect authorization flaw in ColdFusion that could lead to arbitrary code execution, but provides no PoC, exploit, patch, or evidence of active exploitation.
CVE-2026-71387 ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could… https://www.cve.org/CVERecord?id=CVE-2026-71387
Post summary
The text announces Oracle ColdFusion CVE-2026-71387, describing it as an incorrect authorization flaw that can lead to arbitrary code execution in the current user's context, but provides no PoC, exploit, or patch details.
35 of 35 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | adobe | coldfusion | 2023 | - | - |
| App | adobe | coldfusion | 2023 | - | - |
| App | adobe | coldfusion | 2023 | - | - |
| App | adobe | coldfusion | 2023 | - | - |
| App | adobe | coldfusion | 2023 | - | - |
| App | adobe | coldfusion | 2023 | - | - |
| App | adobe | coldfusion | 2023 | - | - |
| App | adobe | coldfusion | 2023 | - | - |
| App | adobe | coldfusion | 2023 | - | - |
| App | adobe | coldfusion | 2023 | - | - |
| App | adobe | coldfusion | 2023 | - | - |
| App | adobe | coldfusion | 2023 | - | - |
| App | adobe | coldfusion | 2023 | - | - |
| App | adobe | coldfusion | 2023 | - | - |
| App | adobe | coldfusion | 2023 | - | - |
| App | adobe | coldfusion | 2023 | - | - |
| App | adobe | coldfusion | 2023 | - | - |
| App | adobe | coldfusion | 2023 | - | - |
| App | adobe | coldfusion | 2023 | - | - |
| App | adobe | coldfusion | 2023 | - | - |
| App | adobe | coldfusion | 2023 | - | - |
| App | adobe | coldfusion | 2023 | - | - |
| App | adobe | coldfusion | 2023 | - | - |
| App | adobe | coldfusion | 2025 | - | - |
| App | adobe | coldfusion | 2025 | - | - |
| App | adobe | coldfusion | 2025 | - | - |
| App | adobe | coldfusion | 2025 | - | - |
| App | adobe | coldfusion | 2025 | - | - |
| App | adobe | coldfusion | 2025 | - | - |
| App | adobe | coldfusion | 2025 | - | - |
| App | adobe | coldfusion | 2025 | - | - |
| App | adobe | coldfusion | 2025 | - | - |
| App | adobe | coldfusion | 2025 | - | - |
| App | adobe | coldfusion | 2025 | - | - |
| App | adobe | coldfusion | 2025 | - | - |