HIGHVulnerability

CVE-2026-83961

ColdFusion is affected by an Improper Authentication vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain limited read and write access. The vulnerable component is restricted to an administrative network zone by default. Exploitation of this issue does not require user interaction. Scope is changed.

Properties

severity
HIGH
score
7.1
epss_score
0.00221
cve_id
CVE-2026-83961
signal_observed_at
2026-09-15T21:12:51+00:00
vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
published_at
2026-09-03T16:18:23.383
last_modified
2026-09-09T13:33:43.513
epss_percentile
0.12775

Related Entities (38)

ENRICHED_BY (1)

[Source]FIRST EPSS

AFFECTS_PRODUCT (35)

[Product]
[Product]
[Product]
[Product]
[Product]
[Product]
[Product]
[Product]
[Product]
[Product]
[Product]
[Product]
[Product]
[Product]
[Product]
[Product]
[Product]
[Product]
[Product]
[Product]

DESCRIBED_BY (1)

[Source]NVD

HAS_WEAKNESS (1)

[Weakness]Improper Authentication

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-83961 — Ninja Signal Threat Intelligence | Ninja Signal