@stackflag.bsky.socialCVE-2026-90530 - coldfusion 2025
Adobe ColdFusion 2025 and 2023 include a Remote Development Service (RDS) that can be tricked into reading files outside its allowed folder. This could let an attacker…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-106620 - coldfusion 2025
The 2025 and 2023 versions of Adobe ColdFusion can be tricked into letting a low‑level user write data without permission. This can happen without any user clicking…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-106622 - coldfusion 2025
Adobe ColdFusion versions 2023 and 2025 can be tricked into sending internal network requests without any user action. This could let an attacker reach otherwise…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-106619 - coldfusion 2025
The 2023 and 2025 versions of Adobe ColdFusion may allow a malicious user to make the server run their own code, even if nobody clicks anything. This can give the…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-106624 - coldfusion 2025
Both the 2025 and 2023 versions of Adobe ColdFusion can be tricked into running whatever code an attacker provides. This can happen without any user clicking anything…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-106621 - coldfusion 2025
The 2023 and 2025 versions of Adobe ColdFusion can let a remote person insert their own commands and have the server execute them. This can happen without any user…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-105903 - coldfusion 2025
The 2025 and 2023 versions of Adobe ColdFusion can be tricked into running any code the attacker supplies, even from a low‑privilege account and without needing a user…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-75994 - coldfusion 2025
Adobe ColdFusion versions 2023 and 2025 contain a flaw that lets an attacker run any program on the server without needing a user to click anything. The issue is limited…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-106612 - coldfusion 2025
Adobe ColdFusion versions 2023 and 2025 can be tricked into running any code the attacker chooses, even without the user doing anything. This means a low‑level attacker…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-105899 - coldfusion 2025
Adobe ColdFusion versions 2025 and 2023 let attackers upload files of any type without checks. A malicious file could run code on the server, giving the attacker the…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-75746 - coldfusion 2025
ColdFusion can be tricked into executing unwanted commands by inserting malicious input into database statements. An attacker who already has high-level access could use…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-48273 - coldfusion 2025
ColdFusion may allow a low‑privilege attacker to make the server execute any commands they choose, without needing a victim to click anything. This could give the…
Too many irrelevant or confusing CVEs? Use stackflag.com