Uncontrolled Resource Consumption Vulnerability in ColdFusion by Adobe
CVE-2026-76000

6.5MEDIUM

Key Information:

Vendor

Adobe

Vendor
CVE Published:
8 September 2026

What is CVE-2026-76000?

ColdFusion, developed by Adobe, is impacted by an Uncontrolled Resource Consumption vulnerability that can result in significant application denial-of-service issues. This vulnerability allows attackers to exploit system resources without any user interaction, potentially leading to extensive downtime and disruption for applications utilizing ColdFusion. Administrators are encouraged to review the relevant security advisory to understand the implications and recommended mitigations.

Affected Version(s)

ColdFusion 2023 0 <= 23

ColdFusion 2025 0 <= 12

ColdFusion 2023 24

References

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.