Adobe Coldfusion 2025 vulnerabilities

• adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 more ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918) CVE-2026-105897 8.6 HighOctober 13, 2026
• adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 more ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918) CVE-2026-34633 7.7 HighOctober 13, 2026
• adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 more ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611) CVE-2026-106616 8.6 HighOctober 13, 2026
• adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 more ColdFusion | Incorrect Authorization (CWE-863) CVE-2026-106618 8.8 HighOctober 13, 2026
• adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 more ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918) CVE-2026-106622 10.0 CriticalOctober 13, 2026
• adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 more ColdFusion | Incorrect Authorization (CWE-863) CVE-2026-105994 7.7 HighOctober 13, 2026
• adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 more ColdFusion | Improper Input Validation (CWE-20) CVE-2026-106619 9.0 CriticalOctober 13, 2026
• adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 more ColdFusion | Incorrect Authorization (CWE-863) CVE-2026-106089 8.8 HighOctober 13, 2026
• adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 more ColdFusion | Improper Input Validation (CWE-20) CVE-2026-106613 8.8 HighOctober 13, 2026
• adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 more ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94) CVE-2026-106624 10.0 CriticalOctober 13, 2026
• adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 more ColdFusion | Incorrect Authorization (CWE-863) CVE-2026-106614 7.8 HighOctober 13, 2026
• adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 more ColdFusion | Uncontrolled Resource Consumption (CWE-400) CVE-2026-75996 7.5 HighOctober 13, 2026
• adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 more ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94) CVE-2026-106621 9.1 CriticalOctober 13, 2026
• adobe coldfusion 2023, coldfusion 2025 +1 more ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) CVE-2026-90530 9.3 CriticalOctober 13, 2026
• adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 more ColdFusion | Incorrect Authorization (CWE-863) CVE-2026-105898 8.2 HighOctober 13, 2026
• adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 more ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94) CVE-2026-105903 9.9 CriticalOctober 13, 2026
• adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 more ColdFusion | Incorrect Authorization (CWE-863) CVE-2026-75994 9.6 CriticalOctober 13, 2026
• adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 more ColdFusion | Incorrect Authorization (CWE-863) CVE-2026-106090 8.8 HighOctober 13, 2026
• adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 more ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918) CVE-2026-34634 8.6 HighOctober 13, 2026
• adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 more ColdFusion | Incorrect Authorization (CWE-863) CVE-2026-106620 9.6 CriticalOctober 13, 2026
• adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 more ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918) CVE-2026-76001 7.1 HighOctober 13, 2026
• adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 more ColdFusion | Incorrect Authorization (CWE-863) CVE-2026-106612 9.9 CriticalOctober 13, 2026
• adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 more ColdFusion | Incorrect Authorization (CWE-863) CVE-2026-106615 8.8 HighOctober 13, 2026
• adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 more ColdFusion | Improper Input Validation (CWE-20) CVE-2026-75995 8.4 HighOctober 13, 2026
• adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 more ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918) CVE-2026-75748 7.6 HighOctober 13, 2026
• adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 more ColdFusion | Improper Input Validation (CWE-20) CVE-2026-105900 7.5 HighOctober 13, 2026
• adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 more ColdFusion | Incorrect Authorization (CWE-863) CVE-2026-71385 8.4 HighOctober 13, 2026
• adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 more ColdFusion | Incorrect Authorization (CWE-863) CVE-2026-105901 8.8 HighOctober 13, 2026
• adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 more ColdFusion | Incorrect Authorization (CWE-863) CVE-2026-106623 7.5 HighOctober 13, 2026
• adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 more ColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434) CVE-2026-105899 10.0 CriticalOctober 13, 2026
• adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 more ColdFusion | Incorrect Authorization (CWE-863) CVE-2026-106617 8.8 HighOctober 13, 2026
• adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 more ColdFusion | Cross-site Scripting (Reflected XSS) (CWE-79) CVE-2026-76002 6.1 MediumSeptember 8, 2026
• adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 more ColdFusion | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) CVE-2026-75746 9.1 CriticalSeptember 8, 2026
• adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 more ColdFusion | Uncontrolled Resource Consumption (CWE-400) CVE-2026-76000 6.5 MediumSeptember 8, 2026
• adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 more ColdFusion | Improper Access Control (CWE-284) CVE-2026-75998 7.5 HighSeptember 8, 2026
• adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 more ColdFusion | Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') (CWE-95) CVE-2026-76190 8.6 HighSeptember 8, 2026
• adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 more ColdFusion | Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') (CWE-95) CVE-2026-48273 9.9 CriticalSeptember 8, 2026
• adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 more ColdFusion | Improper Input Validation (CWE-20) CVE-2026-75999 8.4 HighSeptember 8, 2026
• adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 more ColdFusion | Cross-site Scripting (Reflected XSS) (CWE-79) CVE-2026-75993 8.5 HighSeptember 8, 2026
• adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 more ColdFusion | Improper Authentication (CWE-287) CVE-2026-83961 7.1 HighSeptember 3, 2026
• adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 more ColdFusion | Incorrect Authorization (CWE-863) CVE-2026-71387 8.8 HighAugust 11, 2026
• adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 more ColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78) CVE-2026-48385 7.7 HighAugust 11, 2026
• adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 more ColdFusion | Incorrect Authorization (CWE-863) CVE-2026-71383 7.3 HighAugust 11, 2026
• adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 more ColdFusion | Improper Input Validation (CWE-20) CVE-2026-21279 8.2 HighAugust 11, 2026
• adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 more ColdFusion | Improper Input Validation (CWE-20) CVE-2026-48384 4.9 MediumAugust 11, 2026
• adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 more ColdFusion | Incorrect Authorization (CWE-863) CVE-2026-48375 6.5 MediumAugust 11, 2026
• adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 more ColdFusion | Cross-site Scripting (Stored XSS) (CWE-79) CVE-2026-21269 4.6 MediumAugust 11, 2026
• adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 more ColdFusion | Improper Encoding or Escaping of Output (CWE-116) CVE-2026-48376 5.4 MediumAugust 11, 2026
• adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 more ColdFusion | Heap-based Buffer Overflow (CWE-122) CVE-2026-48440 8.1 HighAugust 11, 2026
• adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 more ColdFusion | Use of Hard-coded Cryptographic Key (CWE-321) CVE-2026-34635 8.4 HighAugust 11, 2026
• Show olderLoading…