Adobe ColdFusion contains a deserialization vulnerability in the Apache BlazeDS library that allows for arbitrary code execution.
Source: NVD ↗ · CISA KEV Catalog ↗