Adobe ColdFusion

Everything Threat Times has reported about Adobe ColdFusion: 6 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

Adobe ColdFusion Faces Critical SSRF Flaw Allowing Unauthenticated Privilege Escalation

Threat TimesOct 13, 2026

A critical vulnerability in Adobe ColdFusion enables server-side request forgery and privilege escalation without any user interaction, affecting recent versions.

Vulnerabilities

Adobe ColdFusion Critical Upload Flaw Allows Remote Code Execution

Threat TimesOct 13, 2026

A CVSS 10.0 vulnerability in ColdFusion allows attackers to execute arbitrary code via file uploads without any user interaction required.

Vulnerabilities

Critical ColdFusion Auth Flaw Allows Arbitrary Code Execution

Threat TimesOct 13, 2026

Adobe ColdFusion faces a CVSS 9.9 vulnerability enabling low-privileged attackers to run arbitrary code without user interaction.

Vulnerabilities

Critical ColdFusion Auth Bypass Grants Write Access to Low-Privilege Attackers

Threat TimesOct 13, 2026

Adobe ColdFusion versions through 2025.0.13 and 2023.0.25 contain a critical flaw that allows unauthorized write access without user interaction.

Vulnerabilities

Adobe ColdFusion Faces Critical Auth Flaw Allowing Remote Code Execution

Threat TimesOct 13, 2026

A severe authorization error in Adobe ColdFusion allows attackers to run arbitrary code without user interaction, affecting versions up to 2025.0.13 and 2023.0.25.

Vulnerabilities

Adobe ColdFusion Critical Code Injection Flaw Allows Remote Execution

Threat TimesOct 13, 2026

A CVSS 9.9 vulnerability in Adobe ColdFusion enables low-privileged attackers to execute arbitrary code without user interaction.