Critical severity10.0NVD Advisory· Published Oct 13, 2026

CVE-2026-105899

Description

ColdFusion is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Adobe Inc./Coldfusionllm-fuzzy

Patches

Vulnerability mechanics

References

www.adobe.com/trust/security/products/coldfusion/apsb26-144.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.650
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000