-
Close Search
Register your first passkey with Adobe ColdFusion 2025, connect it to an existing user, and avoid several security mistakes waiting patiently in the shadows.
NOW LIVE — the October 2026 security updates for ColdFusion 2025 and ColdFusion 2023 have been released. This update includes important security fixes that mitigate vulnerabilities related to arbitrary code execution, arbitrary file write, information disclosure, stored cross-site scripting, and security feature bypass. What’s included The October 2026 release contains: Tomcat upgrades. See the respective tech notes for more details. Security fixes for multiple vulnerabilities (including remote code execution and privilege escalation vectors). Updates to packages. Why you should install […]
Free one-day ColdFusion Summit East, with a subset of talks from CF Summit (from June, in Vegas), and some additional talks.
Whether you’re attending CF Summit East 2026 or not, if you’re in the DC area check out the available day-long workshop held the day before (Oct 28), with Brian Sappey, all about building AI app integration using the features introduced in CF2025 update 8.
We’re excited to announce the availability of Adobe ColdFusion (2023 Release) Update 25, a significant update focused on platform modernization, developer productivity, improved compatibility, and important bug fixes across the server, Administrator, packages, and integrations. The update also includes extensive OEM library upgrades, Query-of-Queries enhancements, metadata handling improvements, spread operator fixes, and updates to several ColdFusion packages. Download the update View the tech note Release highlights OEM upgrades One of the biggest highlights in this release is the update […]
ColdFusion supports using Solr natively. Solr collections can be created both via ColdFusion Administrator or in your application code. By default the Solr in not secured with the built-in installation. Solr has security frameworks for supporting the authentication and authorization of users. This allows for verifying a user’s identity and for restricting access to resources in a Solr Download the zip file from the link provided in this doc and unzip the files. You’ll then copy these files to their respective […]
NOW LIVE — the September 2026 security updates for ColdFusion 2025 and ColdFusion 2023 have been released. The updates resolve critical, important, and moderate vulnerabilities that could lead to arbitrary code execution, arbitrary file system read, privilege escalation, security feature bypass, and memory exposure. What’s included The September 2026 release contains: SQL table and stored-procedure identifier validation New SQL validation opt-out flags XSLT collection() and uri-collection() blocked New XSLT compatibility flag AJAX widget HTML input sanitization guidance Configurable deserialization limits Package updates Download the updates ColdFusion […]
application errors after installing Update 23 on a Windows 2019 server for ColdFusion 2023
The Adobe ColdFusion Performance Monitoring Tool (PMT) provides a centralized way to monitor the health and performance of your ColdFusion instances. Adobe recommends deploying PMT on a dedicated server, allowing you to monitor one or more ColdFusion instances across your environment. By default, however, both the PMT and Datastore services are configured to bind to localhost (127.0.0.1). This may prevents remote ColdFusion instances from communicating with PMT. In this article, we’ll look at how to update the default network bindings and […]
Scheduled Tasks are commonly used in Adobe ColdFusion to automate background operations such as calling APIs, generating reports, sending emails, and synchronizing data. Occasionally, you may encounter a Scheduled Task that fails without providing enough information to identify the actual cause. One common scenario is when the Scheduled Task is configured to invoke an HTTPS URL, but the SSL handshake fails. Although the task reports a generic Connection Failure, the underlying exception isn’t immediately visible. This article walks through a […]
Server.log filling up with message “http://apache.org/xml/features/disallow-doctype-decl”
Adobe has released ColdFusion 2025 Update 12 and ColdFusion 2023 Update 23. The releases resolves critical, important, and moderate vulnerabilities that could lead to arbitrary code execution, arbitrary file system read, privilege escalation, security feature bypass, and memory exposure. View the security bulletin, APSB26-90, for more information. Download the updates ColdFusion 2025 updates ColdFusion 2023 updates What’s new New JVM flag -Dcoldfusion.xml.saxon.allowCollection -Dcoldfusion.debugger.bindhost -Dcoldfusion.websocket.requireAuthForInvoke For more details, view: JVM arguments in CF 2025 JVM arguments in CF 2023 New Application.cfc flag this.wsRequireAuthForInvoke This flag controls whether […]
