Improper Input Validation Vulnerability in Adobe ColdFusion
CVE-2026-75995
8.4HIGH
What is CVE-2026-75995?
Adobe ColdFusion has been identified to have a vulnerability stemming from improper input validation. This weakness allows an attacker with elevated privileges to execute arbitrary code within the context of the current user. Notably, the compromised component is generally limited to an administrative network zone, which typically enhances security; however, an attacker could exploit this vulnerability without any user interaction, thus changing the potential attack scope. Organizations using ColdFusion are advised to consult the official Adobe security advisory for mitigation strategies.
Affected Version(s)
ColdFusion 2023 0 <= 2023.0.25
ColdFusion 2025 0 <= 2025.0.13
ColdFusion 2023 2023.0.26