CVE-2026-27305Patch(adobe / coldfusion)

🚨 HIGH SEVERITY: CVE-2026-27305 CVSS 8.6 - Path Traversal in Adobe ColdFusion 2023.18, 2025.6 & earlier. Remote attackers can read arbitrary files without authentication. Patch immediately. #CVE #Vulnerability #PatchNow #ThreatIntel https://t.co/JWL5lSJtkb

ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) CVE: CVE-2026-27305 PT ID: PT-2026-32921 Vendor: Adobe Product: ColdFusion CVSS: 8.6 Credits: n/a Description: ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction. References: • https://dbugs.ptsecurity.com/vulnerability/CVE-2026-27305 • https://helpx.adobe.com/security/products/coldfusion/apsb26-38.html #dbugs_vuln

CVE-2026-27305 ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that c… https://www.cve.org/CVERecord?id=CVE-2026-27305

CVE-2026-27305 | Adobe ColdFusion | Path Traversal Description ColdFusion versions 2023.18, 2025.6 and earlier suffer from a path traversal vulnerability (CWE-22) allowing unauth attackers to read arbitrary files outside the restricted directory via crafted pathnames, potentially exposing sensitive data without user interaction. Severity: High Exploitation: Unknown Public PoC: Unknown Patch Available: Yes Affected Product: Adobe ColdFusion Affected Version: >= 0 and <= 2025.6 Sources Vendor: https://helpx.adobe.com/security/products/coldfusion/apsb26-38.html