Community Manager

Blog

ColdFusion 2025 (Update 11) and ColdFusion 2023 (Update 22) July 14 Security Updates are live now!

Forum|Forum|21 days ago
July 14, 2026
8 replies
340 views

Adobe has released ColdFusion 2025 Update 11 and ColdFusion 2023 Update 22. The releases resolve critical, important, and moderate vulnerabilities that could lead to arbitrary code execution, privilege escalation, arbitrary file system read, and security feature bypass.

View the security bulletin, APSB26-82, for more information.

Download the updates

What’s new

This update introduces the flag -Dcoldfusion.sql.allowUnsafeTableIdentifiers. The default is False.
Updates to Performance Monitoring Toolset for both CF 2025 and CF 2023.
Updated add-on installers

View the respective tech notes for more details.

Download the updates and validate them in your staging environment. If you encounter any regressions or unexpected behavior after upgrading, report them through the Adobe support channel or your standard issue-tracking process, including relevant logs and reproduction details.

L

Legorol

Known Participant

Missing digital signature:

The refreshed “Windows 64-bit Add-on Services Standalone Installer” for ColdFusion 2023 does not have a digital signature (Authenticode signature). Page https://guides.adobe.com/coldfusion/en/docs/install-and-configure-coldfusion/coldfusion-downloads.html, download link https://cfdownload.adobe.com/pub/adobe/coldfusion/2023/add-on/ColdFusion_2023_Addon_WWEJ_win64.exe, MD5 checksum 97dfdf9d9fc63fd57b75bc6648025c90. The download matches the MD5 checksum.

All other Windows installers for 2023, and the refreshed addon services installer for 2025, all have digital signatures as expected.

Unfortunately our company policy prohibits us from using an installer without a valid digital signature.

L

Legorol

Known Participant

Checksum mismatch for ColdFusion 2023 Update 22 hotfix and packages repository (hotfix-packages-cf2023-022-330928.zip):

On https://guides.adobe.com/coldfusion/en/docs/introduction-to-coldfusion/coldfusion-2023-updates.html, downloading from link https://cfdownload.adobe.com/pub/adobe/coldfusion/2023/packages/hotfix-packages-cf2023-022-330928.zip

MD5 stated on page: d0bcc8176404e2acb5231814e2c00e42

I get: 03b52f9c04826deec196cfcf31497a38

Charlie Arehart

Community Expert

Legarol, did you happen to look into the file? I will share that as for the CF2025 zip, I had reported to Adobe overnight that that one was missing the update files. It was as if they merely renamed the previous update zip. That was corrected, in the past half hour.

It may be that the same happened for CF2023. I had not yet checked. And so it may be that the file you downloaded HAS been updated and IS correct, but either this md5 value on that updates page (which is NOT in the update technote) was a) not yet changed or b) was changed but you are seeing a cached version of the page (and so the old md5 still).

Let us know what you find/confirm. (I get it that you may think “this is just a problem Adobe needs to fix. I’m saying there may be some subtlety to the problem.)

/Charlie (troubleshooter, carehart. org)

W

w49369461

Participating Frequently

If you have done a full install of CF, are you still required to use the addon installers or do these get updated in the normal CF update?

Charlie Arehart

Community Expert

Short answers: no and yes (about the add on installer).

First, no: if in running the full cf installer you told it to implement the add on service (for solr and/or pdfg) then you don't need that separate installer.

Second, when you ask "do these get updated", if you refer to the add on service implemented by the cf installer, cf updates keep that updated when necessary.

FWIW, given the lack of detail in the update technote about the addon installer, I do discuss it more in the blog post I pointed to below.

/Charlie (troubleshooter, carehart. org)

Charlie Arehart

Community Expert

For folks who may appreciate more perspective and detail on this update, see my post.

/Charlie (troubleshooter, carehart. org)

Sign up

To post, reply, or follow discussions, please sign in with your Adobe ID.

Sign in to Adobe Community

To post, reply, or follow discussions, please sign in with your Adobe ID.