Security update available for Adobe ColdFusion | APSB26-144

BlackTree keeps a versioned source snapshot and links it to relevant CVE reports. The publisher remains authoritative for product applicability, release details and installation guidance.

Read the official article ↗

PublisherAdobe

Article IDAPSB26-144

Verified snapshot15 Oct 2026, 10:41 UTC

Linked CVEs32

Linked CVE reports

These are source relationships, not a claim that this article fixes every affected product or branch.

CVE-2026-34633ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)
CVE-2026-106614ColdFusion | Incorrect Authorization (CWE-863)
CVE-2026-105898ColdFusion | Incorrect Authorization (CWE-863)
CVE-2026-106620ColdFusion | Incorrect Authorization (CWE-863)
CVE-2026-76001ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)
CVE-2026-75995ColdFusion | Improper Input Validation (CWE-20)
CVE-2026-75748ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)
CVE-2026-71385ColdFusion | Incorrect Authorization (CWE-863)
CVE-2026-90530ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
CVE-2026-75996ColdFusion | Uncontrolled Resource Consumption (CWE-400)
CVE-2026-105994ColdFusion | Incorrect Authorization (CWE-863)
CVE-2026-106616ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)
CVE-2026-105900ColdFusion | Improper Input Validation (CWE-20)
CVE-2026-106617ColdFusion | Incorrect Authorization (CWE-863)
CVE-2026-105899ColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434)
CVE-2026-105901ColdFusion | Incorrect Authorization (CWE-863)
CVE-2026-106615ColdFusion | Incorrect Authorization (CWE-863)
CVE-2026-106612ColdFusion | Incorrect Authorization (CWE-863)
CVE-2026-34634ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)
CVE-2026-106090ColdFusion | Incorrect Authorization (CWE-863)
CVE-2026-75994ColdFusion | Incorrect Authorization (CWE-863)
CVE-2026-105903ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94)
CVE-2026-106621ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94)
CVE-2026-106624ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94)
CVE-2026-106613ColdFusion | Improper Input Validation (CWE-20)
CVE-2026-106089ColdFusion | Incorrect Authorization (CWE-863)
CVE-2026-106619ColdFusion | Improper Input Validation (CWE-20)
CVE-2026-106622ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)
CVE-2026-106618ColdFusion | Incorrect Authorization (CWE-863)
CVE-2026-105897ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)
CVE-2026-48378CAI Content Credentials | Improper Input Validation (CWE-20)
CVE-2026-106623ColdFusion | Incorrect Authorization (CWE-863)

Source and provenance

Original title: Security update available for Adobe ColdFusion | APSB26-144. Captured 15 Oct 2026, 10:41 UTC. The stored article is used for enrichment and change detection; BlackTree does not republish the publisher's full text here.

Open the publisher's current version ↗