CWE-863

Everything Sandbox Gazette has reported about CWE-863: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

How Does AEM's CVSS 10.0 Auth Flaw Enable Remote Code Execution Without Interaction?

A critical authorization flaw in Adobe Experience Manager enables remote code execution without user interaction, affecting multiple supported versions.

Oct 13, 2026

Vulnerabilities

Is CVE-2026-75994's 9.6 CVSS score warning of critical ColdFusion auth flaws?

A critical authorization flaw in Adobe ColdFusion 2023 and 2025 permits arbitrary code execution without user interaction.

Oct 13, 2026