Class familyAdobe · ColdFusion
Adobe ColdFusion unrestricted file upload flaws, 2018–2026
5 ColdFusion CVEs with CWE-434 weaknesses, 25 Sep 2018 to 13 Oct 2026. 1 is in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
1 2018’18
2019’19
2020’20
2021’21
2022’22
2023’23
2024’24
1 2025’25
3 2026’26
In CISA KEVNot in KEV
20181 CVE, 1 in KEV
20251 CVE
20263 CVEs
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2018-15961KEV | 25 Sep 2018 | Adobe ColdFusion Unrestricted File Upload Vulnerability | Grouped by weakness | 69.9 |
| CVE-2025-61808 | 9 Dec 2025 | ColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434) | Grouped by weakness | 25.5 |
| CVE-2026-48276 | 30 Jun 2026 | ColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434) | Grouped by weakness | 20.9 |
| CVE-2026-48283 | 30 Jun 2026 | ColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434) | Grouped by weakness | 20.9 |
| CVE-2026-105899 | 13 Oct 2026 | ColdFusion is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in… | Grouped by weakness | 22.0 |