Deserialization of Untrusted Data Vulnerability in ColdFusion by Adobe

CVE-2025-61810

What is CVE-2025-61810?

ColdFusion is susceptible to a vulnerability that allows an attacker to exploit deserialization of untrusted data. Affected versions, including ColdFusion 2025.4, 2023.16, and 2021.22, could enable a malicious actor to execute arbitrary code in the context of the current user by interacting with the application. This exploitation involves an attacker sending maliciously crafted serialized data, presenting a risk given its potential for significant security breaches.

References