# Adobe Coldfusion


- [CVE-2026-48282](https://insights.sbomify.com/CVE-2026-48282/): Adobe ColdFusion Path Traversal (critical 10.0, exploited in the wild)
- [CVE-2023-38203](https://insights.sbomify.com/CVE-2023-38203/): Adobe ColdFusion Deserialization of Untrusted Data (critical 9.8, exploited in the wild)
- [CVE-2023-29300](https://insights.sbomify.com/CVE-2023-29300/): Adobe ColdFusion Deserialization of Untrusted Data (critical 9.8, exploited in the wild)
- [CVE-2023-26359](https://insights.sbomify.com/CVE-2023-26359/): Adobe ColdFusion Deserialization of Untrusted Data (critical 9.8, exploited in the wild)
- [CVE-2018-15961](https://insights.sbomify.com/CVE-2018-15961/): Adobe ColdFusion Unrestricted File Upload (critical 9.8, exploited in the wild)
- [CVE-2018-4939](https://insights.sbomify.com/CVE-2018-4939/): Adobe ColdFusion Deserialization of Untrusted Data (critical 9.8, exploited in the wild)
- [CVE-2017-3066](https://insights.sbomify.com/CVE-2017-3066/): Adobe ColdFusion Deserialization (critical 9.8, exploited in the wild)
- [CVE-2013-0632](https://insights.sbomify.com/CVE-2013-0632/): Adobe ColdFusion Authentication Bypass (critical 9.8, exploited in the wild)
- [CVE-2013-0625](https://insights.sbomify.com/CVE-2013-0625/): Adobe ColdFusion Authentication Bypass (critical 9.8, exploited in the wild)
- [CVE-2023-26360](https://insights.sbomify.com/CVE-2023-26360/): Adobe ColdFusion Deserialization of Untrusted Data (high 8.6, exploited in the wild)
- [CVE-2023-38205](https://insights.sbomify.com/CVE-2023-38205/): Adobe ColdFusion Improper Access Control (high 7.5, exploited in the wild)
- [CVE-2023-29298](https://insights.sbomify.com/CVE-2023-29298/): Adobe ColdFusion Improper Access Control (high 7.5, exploited in the wild)

---
From sbomify Insights: https://insights.sbomify.com/products/adobe/coldfusion/