Adobe ColdFusion < 2021.x < 2021u22 / 2023.x < 2023u16 / 2025.x < 2025u4 Vulnerability (APSB25-93)

The version of Adobe ColdFusion installed on the remote Windows host is prior to 2021.x update 22, 2023.x update 16, or 2025.x update 4. It is, therefore, affected by a vulnerability as referenced in the APSB25-93 advisory. - ColdFusion versions 2025.3, 2023.15, 2021.21 and earlier are affected b...

CISA Issues Urgent Warning: Adobe ColdFusion Vulnerability Exploited in the Wild

The U.S. Cybersecurity and Infrastructure Security Agency CISA on March 15 added a security vulnerability impacting Adobe ColdFusion to its Known Exploited Vulnerabilities KEV catalog, based on evidence of active exploitation. The critical flaw in question is CVE-2023-26360 CVSS score: 8.6, which...