Improper Access Control Vulnerability in Adobe ColdFusion Products

CVE-2025-61811

What is CVE-2025-61811?

Adobe ColdFusion versions 2025.4, 2023.16, and 2021.22, as well as earlier iterations, are susceptible to an improper access control vulnerability that facilitates arbitrary code execution in the context of the current user. This issue allows a high-privileged attacker to circumvent established security protocols and execute harmful code, without the need for user interaction. The implications of this vulnerability could lead to significant security breaches, requiring immediate attention and mitigation.

References