Coldfusion

This hub aggregates every CVE we track for Coldfusion, a product in the consumer software space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Coldfusion.

• CVE-2026-47929ColdFusion | Incorrect Authorization (CWE-863)8.4Jun 9, 2026
• CVE-2026-47932ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)8.8Jun 9, 2026
• CVE-2026-47960ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)7.4Jun 9, 2026
• CVE-2026-47928ColdFusion | Improper Input Validation (CWE-20)9.6Jun 9, 2026
• CVE-2026-47931ColdFusion | Improper Input Validation (CWE-20)8.4Jun 9, 2026
• CVE-2026-47930ColdFusion | Improper Input Validation (CWE-20)8.1Jun 9, 2026
• CVE-2026-47933ColdFusion | Cross-site Scripting (Stored XSS) (CWE-79)4.8Jun 9, 2026
• CVE-2026-34619ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)7.7Apr 14, 2026
• CVE-2026-27308ColdFusion | Uncontrolled Resource Consumption (CWE-400)2.4Apr 14, 2026
• CVE-2026-27282ColdFusion | Improper Input Validation (CWE-20)7.5Apr 14, 2026
• CVE-2026-27305ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)8.6Apr 14, 2026
• CVE-2026-27304ColdFusion | Improper Input Validation (CWE-20)9.3Apr 14, 2026
• CVE-2026-27306ColdFusion | Improper Input Validation (CWE-20)8.4Apr 14, 2026
• CVE-2026-27307ColdFusion | Uncontrolled Resource Consumption (CWE-400)2.4Apr 14, 2026
• CVE-2025-61808ColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434)9.1Dec 9, 2025