Description
ColdFusion is affected by an Incorrect Authorization vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue does not require user interaction.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Adobe | ColdFusion 2025 | ≤ 2025.0.13 | 2025.0.14 |
| Adobe | ColdFusion 2023 | ≤ 2023.0.25 | 2023.0.26 |
Advisories 2
- NCSC-2026-0435 Kwetsbaarheden verholpen in Adobe ColdFusion NCSC-NL (Netherlands) · Oct 16, 2026
- WID-SEC-2026-3945 Adobe ColdFusion: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 14, 2026