ZDI-26-070 HIGH 7.2 Published Feb 06, 2026

Adobe ColdFusion CAR File Parsing Directory Traversal Remote Code Execution Vulnerability

Adobe

Adobe ColdFusion contains a vulnerability (CVE-2025-61808) that allows authenticated attackers to execute arbitrary code on affected systems, rated as HIGH severity with a CVSS score of 7.2. An attacker with valid credentials can leverage this flaw to gain unauthorized code execution capabilities on vulnerable ColdFusion installations. Security teams should prioritize patching Adobe ColdFusion installations and review access controls to limit who has authentication credentials to these systems.

Related CVE

CVE-2025-61808

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy