The vulnerability of the ColdFusion interpreter, related to insufficient validation of input data, allows attackers to circumvent existing security restrictions.

The vulnerability of the ColdFusion interpreter is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to bypass existing security restrictions remotely...

The vulnerability of the ColdFusion interpreter, related to insufficient validation of input data, allows attackers to execute arbitrary code.

The vulnerability of the ColdFusion interpreter is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code in the context of the current user, by loading a malicious file...

The vulnerability of the ColdFusion interpreter lies in the incorrect limitation on the path name to the catalog, which allows attackers to bypass existing security restrictions.

The vulnerability of the ColdFusion interpreter is related to incorrect restrictions on path names in the catalog. Exploiting this vulnerability allows an attacker to bypass existing security restrictions remotely...

The vulnerability of the ColdFusion interpreter lies in the incorrect limitation on the path name to the catalog, which allows attackers to read arbitrary files.

The vulnerability of the ColdFusion interpreter is related to incorrect restrictions on path names to the catalog. Exploiting this vulnerability allows an attacker who operates remotely to read arbitrary files...

CVE-2026-27305

ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outsi...

The vulnerability of the ColdFusion software platform, related to uncontrolled resource consumption, allows attackers to cause service failures for the application.

The vulnerability of the ColdFusion software platform is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures for the application...

The vulnerability of the ColdFusion software platform, related to uncontrolled resource consumption, allows attackers to cause service failures for the application.

The vulnerability of the ColdFusion software platform is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures for the application...

Adobe ColdFusion 2023.x < 2023u19 / 2025.x < 2025u7 Multiple Vulnerabilities (APSB26-38)

The version of Adobe ColdFusion installed on the remote Windows host is prior to 2023 update 19 or 2025 update 7. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-38 advisory. - ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Input...

EUVD-2026-22762

ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access unauthorized files or directories...

EUVD-2026-22738

ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. A high-privileged attacker could exploit this vulnerability and exhaust system resources, reducing application speed. Exploitation o...

EUVD-2026-22736

ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. A high-privileged attacker could exploit this vulnerability and exhaust system resources, reducing application speed. Exploitation o...

EUVD-2026-22734

ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Attacker requires elevated privileges. Exploitation of this issue requires user interaction in that a victim...

EUVD-2026-22728

ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue requires us...

EUVD-2026-22730

ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction...

EUVD-2026-22732

ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outsi...

Adobe ColdFusion subscribeToEndpoints Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Adobe ColdFusion. Authentication is not required to exploit this vulnerability. The specific flaw exists within the subscribeToEndpoints method. The issue results from a missing critical step during...

Adobe ColdFusion deleteVersion Directory Traversal Arbitrary File Deletion Vulnerability

This vulnerability allows remote attackers to delete arbitrary files on affected installations of Adobe ColdFusion. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the deleteVersion method. T...

CVE-2026-34619

ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access unauthorized files or directories...

CVE-2026-27308

ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. A high-privileged attacker could exploit this vulnerability and exhaust system resources, reducing application speed. Exploitation o...

CVE-2026-27282

ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue requires us...