Findings

CVE-2026-75996

ColdFusion is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service.

Published Oct 13, 2026 · updated Oct 14, 2026 · Adobe ColdFusion 2025

ColdFusion is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 13, 2026 · Catalog

    Detected

    ColdFusion is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.

  2. Oct 14, 2026 · NIST NVD

    Updated

    ColdFusion is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.

Affected

  • vendor Adobe ColdFusion 2023version unspecified
  • vendor Adobe ColdFusion 2025version unspecified

Sources

  • ColdFusion is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this i

    vulnerability.circl.lu
  • CVE.orgCVE-2026-75996

    Official CVE identifier

    cve.org
  • NIST NVDCVE-2026-75996

    ColdFusion is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this i

    nvd.nist.gov

References

CVE-2026-75996 · ZeroDay Findings