Login Request a demo
CO
App Server
ColdFusion
by Adobe · last CVE Oct 13, 2026
On CISA KEVExploited in the wildRansomware-linked
296
CVEs
17
On KEV
10.0
Max CVSS
30
New 30D
Vulnerabilities296In the news10Timeline
Severity mix
Critical 81High 99Medium 49Low 5
Severity
All severities296Critical81High99Medium49Low5
Exploitation
On CISA KEV17Exploited in the wild17
Watch

Add ColdFusion to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-48329
2.7
1%
Jul 14
ColdFusion | Insufficient Session Expiration (CWE-613)
Affected: 2023; 2023; 2023; 2023; 2023; 2023; +27 more
CVE-2025-54234
2.7
1%
Aug 18
ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to limited file system read
Affected: 2021; 2021; 2021; 2021; 2021; 2021; +30 more
CVE-2026-27308
2.4
2%
Apr 14
ColdFusion | Uncontrolled Resource Consumption (CWE-400)
Affected: 2023; 2023; 2023; 2023; 2023; 2023; +20 more
CVE-2026-27307
2.4
3%
Apr 14
ColdFusion | Uncontrolled Resource Consumption (CWE-400)
Affected: 2023; 2023; 2023; 2023; 2023; 2023; +20 more
CVE-2025-49546
2.4
0%
Jul 8
ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an Improper Access Control vulnerability that could lead to a partial application denial-of-service
Affected: 2021; 2021; 2021; 2021; 2021; 2021; +33 more
Showing 5