CVE-2026-76000
ColdFusion is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 6.5
- CVSS vector
- CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- EPSS probability
- 0.33%
- CWE
- CWE-400
- Published
- 2026-09-08
- Last modified
- 2026-09-08
Affected products
- Adobe ColdFusion 2025
- Adobe ColdFusion 2025
- Adobe ColdFusion 2023
- Adobe ColdFusion 2023
Weakness type
Related vulnerabilities
- CVE-2026-87106 — Consul vulnerable to a denial of service in the native RPC listener
- CVE-2026-9338 — IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities
- CVE-2026-88290 — GV-LPC2011/LPC2211 - Unauthenticated VLSVR Slowloris and Memory Resource Exhaustion
- CVE-2026-88286 — GV-LPC2011/LPC2211 - PTZ Connection-State Accept-Loop Denial of Service
- CVE-2026-22591 — Fast DDS DDSSQLFilter Recursive Parser Stack Exhaustion (Remote DoS)
- CVE-2026-86204 — PocketMine-MP before 5.39.2 Denial of Service via ModalFormResponsePacket
- CVE-2026-86201 — PocketMine-MP before 5.41.1 LogDoS via LoginPacket clientData
- CVE-2025-71418 — PocketMine-MP before 5.25.2 Denial of Service via explode