Resources

Latest from the ColdFusion Community Portal

NOW LIVE! ColdFusion 2025 and 2023 April 2026 security updates

NOW LIVE — the April 2026 security updates for ColdFusion 2025 and ColdFusion 2023 have been released. This update addresses multiple security issues and includes important mitigations we recommend you apply as soon as possible. What’s included The April 2026 release contains: Tomcat upgrades. See the respective tech notes for more details. Security fixes for multiple vulnerabilities (including remote code execution and privilege escalation vectors). Patches to harden request handling, deserialization paths, and template parsing logic. Updates to packages. Why […] Read More

Tomcat 9.0.111 has a critical vulnerability

Asking for a ColdFusion Update Read More

RAG time: Retrieval Augmented Generation in Adobe ColdFusion 2025.1

If you have ever asked an LLM a question and watched it respond with the calm confidence of a kid explaining quantum mechanics in terms of the latest Transformer movie (aka “Bruh… what?”), you already understand why Retrieval-Augmented Generation exists. Retrieval-Augmented Generation, or RAG, is an application pattern that pairs a generative model with a retrieval step so the model can pull relevant context from an external knowledge base before it answers. In the original RAG research framing, the big […] Read More

Let’s talk MCP & CF

If you have been hearing people talk about MCP and feeling like everyone else got the memo while you were in a meeting that should have been an email, you are not alone. MCP, which stands for Model Context Protocol, is quickly becoming one of the most useful ideas in the agentic AI space because it gives applications a standard way to connect models and agents to tools, prompts, and resources. In plain English, it is a common language for […] Read More

AI Assisted Coding Is Changing More Than Our Output

You can feel it in the muscle memory. There was a time when “being good at coding” meant you could hold a big chunk of a problem in your head, translate it into working code, and then patiently chase the weird little edge case that only appears when a user in Ohio clicks the button twice. Now a new reflex is forming: describe the goal, accept a suggestion, tweak it, run it, repeat. That shift is not just about speed. […] Read More

How to get CF to know a user’s real IP address, when behind a proxy, load balancer, caching solution, etc.

If your server is behind some load balancer, proxy, or caching solution, you may need to know the "real" IP address for a user, using CFML code but you may find all requests show "coming from the same ip address", though clearly from different users. Or perhaps you are developer and (related to this problem) you find that you can never get CF "debugging output" to appear, even though your IP address is in the CF Admin list. These problems can be fixed, and this post shows how using Tomcat (which underlies CF) and its available RemoteIPValve, which can be configured pretty easily. Read More