VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 9, 2025· Updated Feb 26, 2026

ColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434)

CVE-2025-61808

Description

ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could lead to arbitrary code execution by a high priviledged attacker. Exploitation of this issue does not require user interaction and scope is changed.

Affected products

2
  • Adobe Inc./Coldfusionllm-fuzzy2 versions
    <= 2021.22, <= 2023.16, <= 2025.4+ 1 more
    • (no CPE)range: <= 2021.22, <= 2023.16, <= 2025.4
    • (no CPE)range: 0

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.