Is Adobe ColdFusion Still Supported? End-of-Life Dates (2026)
Short answer
Adobe ColdFusion is supported and new versions continue to ship; the newest version is supported until 26 Feb 2030. CISA’s Known Exploited Vulnerabilities catalog lists 16 vulnerabilities in Adobe ColdFusion.
Adobe supports ColdFusion 2023 and 2025 with security updates, but each release gets five years of core support and ColdFusion 2021 left core support on 10 November 2025; Adobe's optional extended support year does not include security patches.
Legacy Technology Tracker · Status as of 16 Oct 2026. Data checked 7 Oct 2026; refreshed monthly, with quarterly snapshots kept unchanged.
Risk rating
Low: supported, with new release lines continuing; no licence change recorded in the last 24 months; 16 vulnerabilities on CISA's KEV list (supported versions receive security fixes). How ratings work
Key facts
Every value links to its source and shows when we last checked or retrieved it. Data checked 7 Oct 2026; status as of 16 Oct 2026.
| Fact | Value | Source | Checked |
|---|---|---|---|
| Support status | SupportedAdobe ColdFusion releases (Core and Extended support). | ||
| Newest version supported until | |||
| Extended support offer | Adobe ColdFusion extended support (optional best-effort assistance for the year after core support; does not include security patches or hot fixes) (vendor), until 10 Nov 2026 | ||
| Known exploited vulnerabilities (CISA KEV) | 16 CVEs all time; 3 added in the last 24 monthsNewest added 7 Jul 2026Matched by vendor and product name in the KEV catalog. | ||
| Home pages using Adobe ColdFusion, all versions (HTTP Archive, mobile) | 3,563 (0.04% of the crawl), Aug 2026 | ||
| Home pages using Adobe ColdFusion, all versions (HTTP Archive, desktop) | 3,713 (0.069% of the crawl), Aug 2026 | ||
| Same measure 12 months earlier (mobile) | 4,449 (0.048% of the crawl), Aug 2025 | ||
| Job postings and salaries | Not published: the job-posting source is on hold pending a data licence. | — | — |
Versions in scope
Adobe ColdFusion releases (Core and Extended support). Dates per version, each with its source.
| Version | Status | Standard support ends | Extended support ends | Latest release | Source | Checked |
|---|---|---|---|---|---|---|
| ColdFusion 10 | Unsupported | — | 10.0.23.302580 (25 Apr 2017) | |||
| ColdFusion 11 | Unsupported | — | 11.0.19.314546 (11 Jun 2019) | |||
| ColdFusion (2016 release) | Unsupported | — | 2016.0.17.325979 (22 Mar 2021) | |||
| ColdFusion (2018 release) | Unsupported | — | 2018.0.19.330149 (19 Jul 2023) | |||
| ColdFusion (2021 release) | Unsupported | — | 2021.0.23.330486 (9 Dec 2025) | |||
| ColdFusion (2023 release) | Supported | — | 2023.0.24.330957 (8 Sep 2026) | |||
| ColdFusion (2025 release) | Supported | — | 2025.0.13.331960 (8 Sep 2026) |
If you still run Adobe ColdFusion
The deadline that matters is the end of core support for your release. ColdFusion 2021 and earlier are already past it (2021 ended on 10 November 2025). Adobe says that after core support, no security patches or hot fixes are issued, and that its optional extended support year is best-effort assistance, not a patch period. Core support for 2023 runs to 16 May 2028 and for 2025 to 26 February 2030.
The realistic options:
- Upgrade within the line. Moving to ColdFusion 2023 or 2025 restores security updates and keeps the application on CFML. Adobe moved ColdFusion 2025 to subscription licensing and ended perpetual licences, so check the cost and licence terms with Adobe or a reseller before planning around it.
- Switch CFML engine. Lucee and BoxLang run CFML code outside Adobe's product. Compatibility is not complete, so test the application against the engine before committing.
- Migrate off CFML. Rewrite or re-platform the application on another language and framework. This is the largest piece of work and the only option that ends the dependency.
Do not count on extended support as a safety net. If a release is outside core support, assume it gets no fixes.
For suppliers, see legacy application modernization companies. Modernization costs gives budget context.
Frequently asked questions
Is ColdFusion still supported?
Yes, the current releases are. Adobe's support matrix lists core support for ColdFusion 2023 until 16 May 2028 and for ColdFusion 2025 until 26 February 2030. ColdFusion 2021 and earlier are outside core support.
When does each ColdFusion version reach end of support?
Adobe's support matrix gives these ends of core support: ColdFusion 2016 on 17 February 2021, 2018 on 13 July 2023, 2021 on 10 November 2025, 2023 on 16 May 2028 and 2025 on 26 February 2030. Adobe's policy is five years of core support per release.
Does ColdFusion extended support include security fixes?
No. Adobe describes extended support as best-effort assistance to help customers migrate to a core-supported version, and says it does not include security patches or hot fixes. Buying it does not extend the security update period.