Live › vulnerability › CVE-2018-15961
Go to dashboardAdobe ColdFusion has an unrestricted file upload flaw that lets an attacker upload files the server does not check. The sources say this allows code execution on the server.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Adobe ColdFusion | vendor | – | – |
Unknown from the sources. In the analyst’s queue.
Apply the Adobe ColdFusion updates per vendor instructions; the sources do not name the fixed version.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have an unrestricted file upload vulnerability. Successful exploitation could lead to arbitrary code execution.
This page as .md · .json · in your agent: get_signal("CVE-2018-15961")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.