C2
Product
ColdFusion 2023
by Adobe · last CVE Oct 13, 2026
On CISA KEVExploited in the wild
96
CVEs
1
On KEV
10.0
Max CVSS
31
New 30D
Severity mix
Critical 32High 52Medium 9Low 3
Watch

Add ColdFusion 2023 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-48329
2.7
1%
Jul 14
ColdFusion | Insufficient Session Expiration (CWE-613)
Affected: through 21
CVE-2026-27308
2.4
2%
Apr 14
ColdFusion | Uncontrolled Resource Consumption (CWE-400)
Affected: through 18
CVE-2026-27307
2.4
3%
Apr 14
ColdFusion | Uncontrolled Resource Consumption (CWE-400)
Affected: through 18
Showing 3