中文

// CVE · PUBLISHED 2026-10-13

CVE-2026-105899

Adobe / ColdFusion 2025 · Adobe / ColdFusion 2023

10.0 · CVSS 3.1Critical

Description

ColdFusion is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

References

Related CVEs

← CVE Index: search every CVE from the last 30 days

This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.