Improper Input Validation in Adobe ColdFusion Affecting Users

CVE-2026-75999

What is CVE-2026-75999?

Adobe ColdFusion is susceptible to an Improper Input Validation vulnerability that enables a low-privileged attacker to leverage user interaction for arbitrary code execution. This security issue arises when a victim inadvertently opens a malicious file, allowing the exploit to execute within the context of the current user. By default, the affected component is restricted to an administrative network zone, but the nature of the vulnerability increases the risk when users are manipulated into activating the exploit.

References