CVE-2026-105899

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion 2025 Update 13 Adobe ColdFusion 2023 Update 25

Description Adobe ColdFusion is affected by an unrestricted upload of dangerous file types. This issue allows an unauthenticated attacker to upload files that could result in arbitrary code execution in the context of the current user. Exploitation does not require user interaction and targets network-reachable applications.

Recommendations Upgrade Adobe ColdFusion 2025 to Update 14. Upgrade Adobe ColdFusion 2023 to Update 26. Restrict access to unnecessary administrative interfaces. Apply Adobe ColdFusion security configuration and lockdown recommendations.