CVE-2026-105900: ColdFusion | Improper Input Validation (CWE-20)
Published Oct 13, 2026
·Updated
ColdFusion is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require user interaction.
Affected Software
1 affected component
Adobe ColdFusion
Event History
Oct 13, 2026
CVE Published
via MITRE·08:21 PM
Data Sourced
via MITRE·08:21 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Can this be exploited remotely without credentials or user interaction?
Yes. The vector is network-accessible, requires low attack complexity, and requires neither privileges nor user interaction.
2
What is the expected impact if exploitation succeeds?
Successful exploitation can crash the ColdFusion application and cause a denial-of-service condition. The provided severity vector indicates no stated confidentiality or integrity impact.