Description
ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.
Published: 2026-10-13
Score: 8.6 High
EPSS: < 1% Very Low
KEV: No
Impact: Privilege escalation via Server‑Side Request Forgery
Action: Apply Patch
AI Analysis

Impact

ColdFusion accepts externally supplied URLs that are fetched by the server, allowing an attacker to direct the application to internal resources. The flaw is a Server‑Side Request Forgery (CWE‑918) that can elevate privileges; it does not require user interaction and changes the security scope.

Affected Systems

Adobe ColdFusion versions 2023 and 2025 are impacted.

Risk and Exploitability

The CVSS score of 8.6 indicates high severity. The EPSS score is below 1%, reflecting a low but non‑zero likelihood of exploitation, and the vulnerability is not listed in CISA’s KEV catalog. Attackers can exploit the flaw remotely by issuing crafted requests that cause the ColdFusion server to access arbitrary URLs, potentially exposing internal services or escalating privileged access.

Generated by OpenCVE AI on October 16, 2026 at 03:54 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the latest security update released by Adobe for ColdFusion 2023 and 2025
  • Restrict the ColdFusion server’s outbound network traffic to only the services that are required for normal operation
  • Configure firewall rules to block outbound connections from the ColdFusion servers to internal IP ranges and monitor logs for anomalous outbound requests

Generated by OpenCVE AI on October 16, 2026 at 03:54 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sat, 17 Oct 2026 06:45:00 +0000

Type Values Removed Values Added
First Time appeared Adobe coldfusion 2023
Adobe coldfusion 2025
Vendors & Products Adobe coldfusion 2023
Adobe coldfusion 2025

Fri, 16 Oct 2026 21:00:00 +0000

Type Values Removed Values Added
First Time appeared Adobe
Adobe coldfusion
CPEs cpe:2.3:a:adobe:coldfusion:2023:update10:*:*:*:*:*:*
cpe:2.3:a:adobe:coldfusion:2023:update11:*:*:*:*:*:*
cpe:2.3:a:adobe:coldfusion:2023:update12:*:*:*:*:*:*
cpe:2.3:a:adobe:coldfusion:2023:update13:*:*:*:*:*:*
cpe:2.3:a:adobe:coldfusion:2023:update14:*:*:*:*:*:*
cpe:2.3:a:adobe:coldfusion:2023:update15:*:*:*:*:*:*
cpe:2.3:a:adobe:coldfusion:2023:update16:*:*:*:*:*:*
cpe:2.3:a:adobe:coldfusion:2023:update17:*:*:*:*:*:*
cpe:2.3:a:adobe:coldfusion:2023:update18:*:*:*:*:*:*
cpe:2.3:a:adobe:coldfusion:2023:update19:*:*:*:*:*:*
cpe:2.3:a:adobe:coldfusion:2023:update1:*:*:*:*:*:*
cpe:2.3:a:adobe:coldfusion:2023:update20:*:*:*:*:*:*
cpe:2.3:a:adobe:coldfusion:2023:update21:*:*:*:*:*:*
cpe:2.3:a:adobe:coldfusion:2023:update22:*:*:*:*:*:*
cpe:2.3:a:adobe:coldfusion:2023:update23:*:*:*:*:*:*
cpe:2.3:a:adobe:coldfusion:2023:update24:*:*:*:*:*:*
cpe:2.3:a:adobe:coldfusion:2023:update25:*:*:*:*:*:*
cpe:2.3:a:adobe:coldfusion:2023:update2:*:*:*:*:*:*
cpe:2.3:a:adobe:coldfusion:2023:update3:*:*:*:*:*:*
cpe:2.3:a:adobe:coldfusion:2023:update4:*:*:*:*:*:*
cpe:2.3:a:adobe:coldfusion:2023:update5:*:*:*:*:*:*
cpe:2.3:a:adobe:coldfusion:2023:update6:*:*:*:*:*:*
cpe:2.3:a:adobe:coldfusion:2023:update7:*:*:*:*:*:*
cpe:2.3:a:adobe:coldfusion:2023:update8:*:*:*:*:*:*
cpe:2.3:a:adobe:coldfusion:2023:update9:*:*:*:*:*:*
cpe:2.3:a:adobe:coldfusion:2025:update10:*:*:*:*:*:*
cpe:2.3:a:adobe:coldfusion:2025:update11:*:*:*:*:*:*
cpe:2.3:a:adobe:coldfusion:2025:update12:*:*:*:*:*:*
cpe:2.3:a:adobe:coldfusion:2025:update13:*:*:*:*:*:*
cpe:2.3:a:adobe:coldfusion:2025:update1:*:*:*:*:*:*
cpe:2.3:a:adobe:coldfusion:2025:update2:*:*:*:*:*:*
cpe:2.3:a:adobe:coldfusion:2025:update3:*:*:*:*:*:*
cpe:2.3:a:adobe:coldfusion:2025:update4:*:*:*:*:*:*
cpe:2.3:a:adobe:coldfusion:2025:update5:*:*:*:*:*:*
cpe:2.3:a:adobe:coldfusion:2025:update6:*:*:*:*:*:*
cpe:2.3:a:adobe:coldfusion:2025:update7:*:*:*:*:*:*
cpe:2.3:a:adobe:coldfusion:2025:update8:*:*:*:*:*:*
cpe:2.3:a:adobe:coldfusion:2025:update9:*:*:*:*:*:*
Vendors & Products Adobe
Adobe coldfusion

Wed, 14 Oct 2026 11:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 13 Oct 2026 20:45:00 +0000

Type Values Removed Values Added
Description ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.
Title ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)
Weaknesses CWE-918
References
Metrics cvssV3_1

{'score': 8.6, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N'}

Subscriptions

Adobe Coldfusion Coldfusion 2023 Coldfusion 2025
cve-icon MITRE

Status: PUBLISHED

Assigner: adobe

Published:

Updated: 2026-10-14T10:40:52.357Z

Reserved: 2026-10-06T01:54:12.050Z

Link: CVE-2026-105897

cve-icon Vulnrichment

Updated: 2026-10-14T10:39:37.788Z

cve-icon NVD

Status : Analyzed

Published: 2026-10-13T21:17:29.240

Modified: 2026-10-16T20:50:59.813

Link: CVE-2026-105897

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-17T06:30:05Z

Weaknesses
  • CWE-918

    Server-Side Request Forgery (SSRF)