CVE-2026-71384: Incorrect Authorization in Adobe ColdFusion Leading to DoS
A CVSS 9.6 incorrect authorization vulnerability in Adobe ColdFusion that could cause application denial-of-service. Fixed in versions 2025.0.12 and 2023.0.23.
Tag: authorization
CVE-2026-71362: Privilege Escalation in Adobe Commerce
A CVSS 9.1 incorrect authorization vulnerability in Adobe Commerce that could lead to privilege escalation.
CVE-2025-20701: Incorrect Authorization in Airoha Bluetooth Audio SDK
A high-severity vulnerability in the Airoha Bluetooth audio SDK allows unauthorized Bluetooth pairing without user consent, enabling nearby attackers to eavesdrop via…
Airoha Bluetooth Audio SDK
Software development kit for Bluetooth audio devices containing the incorrect authorization flaw leading to CVE-2025-20701.