CVE-2026-71384 is an Incorrect Authorization vulnerability in Adobe ColdFusion 2025. It enables an attacker to bypass security features, resulting in unauthorized read and write access to the application. This vulnerability can cause a denial-of-service condition. The affected component is normally limited to an administrative network zone, reducing exposure. The attack vector is adjacent network (AV:A), with low attack complexity (AC:L), no privileges required (PR:N), and no user interaction (UI:N). The vulnerability affects confidentiality, integrity, and availability with a changed scope.

Successful exploitation allows an attacker to bypass security controls and gain unauthorized read and write access, potentially causing a denial-of-service condition. The vulnerability affects confidentiality, integrity, and availability of the affected system. Since the vulnerable component is restricted to an administrative network zone by default, exposure is limited to that environment.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the administrative network zone and monitor for suspicious activity. No vendor advisory or patch links are currently provided.