Skip to content

Adobe Coldfusion 2025 vulnerabilities

adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Use of a Broken or Risky Cryptographic Algorithm (CWE-327)CVE-2026-483867.5 HighAugust 11, 2026
adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)CVE-2026-4836210.0 CriticalAugust 11, 2026
adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Cross-site Scripting (XSS) (CWE-79)CVE-2026-713868.8 HighAugust 11, 2026
adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Incorrect Authorization (CWE-863)CVE-2026-713849.6 CriticalAugust 11, 2026
adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Incorrect Authorization (CWE-863)CVE-2026-256527.8 HighAugust 11, 2026
adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Improper Input Validation (CWE-20)CVE-2026-212738.7 HighAugust 11, 2026
adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Cross-site Scripting (Reflected XSS) (CWE-79)CVE-2026-483208.5 HighJuly 14, 2026
adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)CVE-2026-483249.1 CriticalJuly 14, 2026
adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)CVE-2026-483327.7 HighJuly 14, 2026
adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)CVE-2026-483189.9 CriticalJuly 14, 2026
adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Incorrect Authorization (CWE-863)CVE-2026-483279.0 CriticalJuly 14, 2026
adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)CVE-2026-483386.8 MediumJuly 14, 2026
adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Insufficient Session Expiration (CWE-613)CVE-2026-483292.7 LowJuly 14, 2026
adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)CVE-2026-483199.1 CriticalJuly 14, 2026
adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Incorrect Authorization (CWE-863)CVE-2026-483219.3 CriticalJuly 14, 2026
adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94)CVE-2026-483229.9 CriticalJuly 14, 2026
adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Improper Input Validation (CWE-20)CVE-2026-482849.6 CriticalJuly 14, 2026
adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Improper Input Validation (CWE-20)CVE-2026-483287.7 HighJuly 14, 2026
adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Missing Authentication for Critical Function (CWE-306)CVE-2026-483259.3 CriticalJuly 14, 2026
adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Uncontrolled Search Path Element (CWE-427)CVE-2026-483638.2 HighJuly 13, 2026
adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Uncontrolled Search Path Element (CWE-427)CVE-2026-483648.2 HighJuly 13, 2026
adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Improper Input Validation (CWE-20)CVE-2026-4831610.0 CriticalJuly 6, 2026
adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Improper Input Validation (CWE-20)CVE-2026-483159.3 CriticalJune 30, 2026
adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Improper Input Validation (CWE-20)CVE-2026-4828110.0 CriticalJune 30, 2026
adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Improper Input Validation (CWE-20)CVE-2026-4827710.0 CriticalJune 30, 2026
adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)CVE-2026-483139.3 CriticalJune 30, 2026
adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)CVE-2026-482858.6 HighJune 30, 2026
adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Cross-site Scripting (Reflected XSS) (CWE-79)CVE-2026-483078.8 HighJune 30, 2026
adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)CVE-2026-483146.5 MediumJune 30, 2026
adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)CVE-2026-48282In KEVPublic exploitEPSS 42.4%10.0 CriticalJune 30, 2026
adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434)CVE-2026-4827610.0 CriticalJune 30, 2026
adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434)CVE-2026-4828310.0 CriticalJune 30, 2026
adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)CVE-2026-479328.8 HighJune 9, 2026
adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Incorrect Authorization (CWE-863)CVE-2026-479298.4 HighJune 9, 2026
adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)CVE-2026-479607.4 HighJune 9, 2026
adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Improper Input Validation (CWE-20)CVE-2026-479289.6 CriticalJune 9, 2026
adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Improper Input Validation (CWE-20)CVE-2026-479318.4 HighJune 9, 2026
adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Improper Input Validation (CWE-20)CVE-2026-479308.1 HighJune 9, 2026
adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2026-479334.8 MediumJune 9, 2026
adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)CVE-2026-346197.7 HighApril 14, 2026
adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Uncontrolled Resource Consumption (CWE-400)CVE-2026-273082.4 LowApril 14, 2026
adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)CVE-2026-27305EPSS 26.7%8.6 HighApril 14, 2026
adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Improper Input Validation (CWE-20)CVE-2026-272827.5 HighApril 14, 2026
adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Improper Input Validation (CWE-20)CVE-2026-273049.3 CriticalApril 14, 2026
adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Improper Input Validation (CWE-20)CVE-2026-273068.4 HighApril 14, 2026
adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Uncontrolled Resource Consumption (CWE-400)CVE-2026-273072.4 LowApril 14, 2026