CVE-2026-75996: ColdFusion | Uncontrolled Resource Consumption (CWE-400)
Published Oct 13, 2026
·Updated
ColdFusion is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.
Affected Software
1 affected component
Adobe ColdFusion
Event History
Oct 13, 2026
CVE Published
via MITRE·08:21 PM
Data Sourced
via MITRE·08:21 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Does an attacker need credentials or a user to interact with the application?
No. The CVSS vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required.
2
What is the expected security impact beyond availability?
The provided CVSS vector rates the impact as high on availability, with no assessed confidentiality or integrity impact. The stated outcome is application denial of service through system resource exhaustion.