# ColdFusion security incidents · pwn.watch

> Security incidents tagged ColdFusion (vendor, product, platform or attack type).

Page: https://pwn.watch/t/coldfusion · generated 2026-10-22T18:38:01.102Z

## Status (as of 2026-10-22)
- Incidents: 7 (0 live, 0 live and not fully patched, 7 patched)
- Days without a ColdFusion security incident: 107
- Newest incident started: 2026-07-07

## Feeds
- JSON (incidents + changes + posts): https://pwn.watch/t/coldfusion.json
- RSS (one item per incident, bumped on each update): https://pwn.watch/t/coldfusion/feed.xml
- This file: https://pwn.watch/t/coldfusion/llms.txt
- Whole site: https://pwn.watch/llms.txt · all tags: https://pwn.watch/tags.json

## Incidents (newest first by start date)
- [Adobe ColdFusion: Adobe ColdFusion Path Traversal Vulnerability](https://pwn.watch/i/adobe-coldfusion-cve-2026-48282) ([json](https://pwn.watch/i/adobe-coldfusion-cve-2026-48282.json)): high, closed, patched, started 2026-07-07, CVE-2026-48282
- [Adobe ColdFusion: ColdFusion Deserialization Vulnerability](https://pwn.watch/i/adobe-coldfusion-cve-2017-3066) ([json](https://pwn.watch/i/adobe-coldfusion-cve-2017-3066.json)): critical, closed, patched, started 2025-02-24, CVE-2017-3066
- [Adobe ColdFusion Improper Access Control](https://pwn.watch/i/adobe-coldfusion-cve-2024-20767) ([json](https://pwn.watch/i/adobe-coldfusion-cve-2024-20767.json)): high, closed, patched, started 2024-03-18, CVE-2024-20767
- [Adobe ColdFusion: 2 actively exploited vulnerabilities](https://pwn.watch/i/adobe-coldfusion-cve-2023-29300-38203) ([json](https://pwn.watch/i/adobe-coldfusion-cve-2023-29300-38203.json)): critical, closed, patched, started 2024-01-08, CVE-2023-29300, CVE-2023-38203
- [Adobe ColdFusion: Deserialization of Untrusted Data (CVE-2023-26359)](https://pwn.watch/i/adobe-coldfusion-cve-2023-26359) ([json](https://pwn.watch/i/adobe-coldfusion-cve-2023-26359.json)): critical, closed, patched, started 2023-08-21, CVE-2023-26359
- [Adobe ColdFusion: 2 exploited vulnerabilities (CVE-2023-29298, CVE-2023-38205)](https://pwn.watch/i/adobe-coldfusion-cve-2023-29298-38205) ([json](https://pwn.watch/i/adobe-coldfusion-cve-2023-29298-38205.json)): high, closed, patched, started 2023-07-20, CVE-2023-29298, CVE-2023-38205
- [Adobe ColdFusion: Deserialization of Untrusted Data (CVE-2023-26360)](https://pwn.watch/i/adobe-coldfusion-cve-2023-26360) ([json](https://pwn.watch/i/adobe-coldfusion-cve-2023-26360.json)): high, closed, patched, started 2023-03-15, CVE-2023-26360