ZDI-26-262
MEDIUM 5.4
Published
Apr 15, 2026
Adobe ColdFusion deleteVersion Directory Traversal Arbitrary File Deletion Vulnerability
Adobe
This vulnerability allows remote attackers to delete arbitrary files on affected installations of Adobe ColdFusion. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The ZDI has assigned a CVSS rating of 5.4.