CVE-2026-55255 Privilege Escalation Vulnerability affecting ColdFusion

Evidence indicates that ColdFusion is affected by privilege escalation. Reported affected versions include < 1.9.1. Exploitation evidence is classified as confirmed in the wild.

What Happened

Evidence indicates that ColdFusion is affected by privilege escalation. Reported affected versions include < 1.9.1. Exploitation evidence is classified as confirmed in the wild.

Why This Matters

The evidence matters to defenders using ColdFusion because it could allow an attacker to gain additional privileges.

Recommended Action

Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. Identify deployments of ColdFusion matching the evidenced affected versions: < 1.9.1.

Exposure

Exploitation status: CONFIRMED_IN_THE_WILD

Affected versions: < 1.9.1

Primary entities:

Authoritative Intelligence

Provider evidence: NVD, GitHub Advisory, OSV, CISA KEV, FIRST EPSS

EPSS is a vulnerability exploitation probability signal, not proof that your environment is exposed. CISA KEV means known exploitation of the vulnerability, not that your system was exploited.

Timeline

• Incident first seen
  Jul 12, 2026 05:30

  BugSkan first recorded this incident.

• Week in review: Accenture data breach, great open-source cybersecurity tools - Help Net Security
  Jul 12, 2026 05:30

  helpnetsecurity.com · Vulnerability

Sources

Watchlist Match