CVE-2026-27308 is an Uncontrolled Resource Consumption vulnerability affecting Adobe ColdFusion versions 2023.18, 2025.6, and earlier. A high-privileged attacker can exploit this issue without user interaction to exhaust system resources, leading to degraded application performance or denial-of-service. The vulnerability is classified under CWE-400 and has a CVSS v3.1 base score of 2.4, reflecting low severity with attack vector requiring adjacent network access and high privileges. No official remediation or patch has been documented at this time.

Successful exploitation results in reduced application speed or denial-of-service conditions due to resource exhaustion. There is no impact on confidentiality or integrity. The attacker must have high privileges and network adjacency to exploit this vulnerability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the Adobe vendor advisory for current remediation guidance. Until an official fix is available, limit high-privileged access and monitor resource usage to detect potential abuse. No vendor-provided temporary fixes or workarounds are currently documented.