ZDI-26-070
HIGH 7.2
Published
Feb 06, 2026
Adobe ColdFusion CAR File Parsing Directory Traversal Remote Code Execution Vulnerability
Adobe
Adobe ColdFusion contains a vulnerability (CVE-2025-61808) that allows authenticated attackers to execute arbitrary code on affected systems, rated as HIGH severity with a CVSS score of 7.2. An attacker with valid credentials can leverage this flaw to gain unauthorized code execution capabilities on vulnerable ColdFusion installations. Security teams should prioritize patching Adobe ColdFusion installations and review access controls to limit who has authentication credentials to these systems.