Executive brief
Adobe ColdFusion is an enterprise application development platform widely used to build and deploy web applications. An improper input validation flaw allows attackers to bypass security controls and gain unauthorized read access and limited write capabilities to protected resources without requiring user interaction. This could compromise the confidentiality and integrity of applications and data hosted on affected ColdFusion servers.
Technical details
The vulnerability is an improper input validation issue in Adobe ColdFusion that permits an attacker to bypass security features. The flaw allows unauthenticated network-based exploitation without user interaction required. An attacker can leverage this to gain unauthorized read access and perform limited write operations on the affected system. The vulnerability is classified as high severity with a CVSS score of 8.2, indicating significant risk to confidentiality and integrity of protected resources.
Affected products
- Adobe ColdFusion
Timeline
- 2026-08-11: disclosed