A vulnerability was found in Adobe ColdFusion up to 2023.18/2025.6. It has been rated as critical. Impacted is an unknown function. This manipulation causes path traversal.
This vulnerability is tracked as CVE-2026-27305. The attack is possible to be carried out remotely. No exploit exists.
