{"vulnerability": "CVE-2026-106618", "sightings": [{"uuid": "e7cd6ee9-7f6c-4659-bf97-38ee6e088791", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-106618", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mxynfp4seq26", "content": "\ud83d\udccc CVE-2026-106618 - ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A... https://www.cyberhub.blog/cves/CVE-2026-106618", "creation_timestamp": "2026-10-16T13:07:07.236239Z"}, {"uuid": "954f5b7e-3c60-4438-ad27-969bed04648b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-106618", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117439795797148093", "content": "CVE-2026-106618 ColdFusion | Incorrect Authorization (CWE-863) ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.\nhttps://www.cve.org/CVERecord?id=CVE-2026-106618https://www.adobe.com/trust/security/products/coldfusion/apsb26-144.html#Adobe #ColdFusion2025 #ColdFusion2023#CVE_2026_106618#bot", "creation_timestamp": "2026-10-14T14:44:32.148759Z"}]}