Adobe ColdFusion Improper Input Validation Vulnerability Allowing Arbitrary Code Execution

A vulnerability allowing arbitrary code execution has been identified in Adobe ColdFusion versions 2023.18, 2025.6 and earlier. This issue arises from improper input validation and can be exploited without user interaction, executing the malicious code in the context of the current user.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution on the affected system.

Remediation

Users are advised to update to ColdFusion 2025 Update 7 or ColdFusion 2023 Update 19. For more information, refer to the Adobe ColdFusion 2025 Update 7 Tech Note or the Adobe ColdFusion 2023 Update 19 Tech Note.