CVE-2026-27307 is an uncontrolled resource consumption vulnerability in Adobe ColdFusion affecting versions 2023.18, 2025.6, and earlier. A high-privileged attacker can exploit this flaw without user interaction to exhaust system resources, leading to reduced application performance or denial-of-service conditions. The vulnerability is classified under CWE-400 and has a CVSS 3.1 base score of 2.4, reflecting low severity. No patch or official remediation level has been published by Adobe as of the vulnerability's disclosure date.

Successful exploitation can result in denial-of-service by exhausting system resources, causing reduced application speed or unavailability. There is no impact on confidentiality or integrity. The attack requires high privileges and does not involve user interaction. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or mitigation level is provided, organizations should monitor Adobe's advisories for updates. Until a patch is available, restricting high-privileged access and limiting potential attack vectors may reduce risk.