CFXColdFusion Expert

Versions & End of Life

Adobe ColdFusion End of Life: Support Dates for Every Version

By Tony Peacock, founder of ColdFusion Expert
Updated
October 4, 2026

Quick answer

Adobe supports each ColdFusion release with about five years of core support (updates and security fixes) plus one year of extended support that does not include patches. As of October 2026, only ColdFusion 2023 and 2025 receive security updates; ColdFusion 2021 core support ended November 10, 2025.

What does end of life mean for Adobe ColdFusion?

Each Adobe ColdFusion release gets about five years of core support, followed by one year of extended support. Core support includes updates, bug fixes and security patches. Extended support is best-effort help with migrating to a supported version. Adobe states it does not include security patches or hotfixes. In practice, a ColdFusion release stops receiving security fixes the day core support ends.

Which ColdFusion versions are still supported?

As of October 2026, only ColdFusion 2023 and ColdFusion 2025 receive updates and security patches.

  • ColdFusion 2025: released February 2025; supported, with core support expected to run to about 2030. Sold as a subscription.
  • ColdFusion 2023: released May 2023; supported, with core support scheduled to end in May 2028.
  • ColdFusion 2021: core support ended November 10, 2025; extended support ends November 10, 2026.
  • ColdFusion 2018: core support ended July 2023; extended support ended July 2024.
  • ColdFusion 2016: core support ended February 2021 (final update March 2021); extended support ended February 2022.
  • ColdFusion 11: core support ended April 2019; extended support ended April 2021.
  • ColdFusion 10: core support ended May 2017; extended support ended May 2019.

What are the risks of running an unsupported version?

New vulnerabilities in an unsupported release are never patched. Over time, newer Java versions, operating systems, databases and third-party services also stop working with it, and compliance frameworks such as PCI DSS expect supported, patched software. The application keeps running, but the risk grows every month.

What are your options?

  • Upgrade to ColdFusion 2023 or 2025 and stay on Adobe.
  • Migrate to Lucee, the open-source CFML engine, and drop license fees.
  • Buy extended support only as a short bridge while one of the above is underway.

Not sure which path fits your application? A short consultation and a compatibility audit will tell you which option costs less.

Frequently asked questions

Does Adobe ColdFusion extended support include security patches?

No. Adobe describes extended support as best-effort help with migrating to a supported version, and states that it does not include security patches or hotfixes. Security fixes stop when core support ends.

Is ColdFusion 2021 still supported?

No. Core support for ColdFusion 2021 ended on November 10, 2025, so it no longer receives updates or security fixes. Extended support runs to November 10, 2026 but only covers migration help.

What is the latest version of Adobe ColdFusion?

ColdFusion 2025 is the newest Adobe release. It is sold as a subscription rather than a perpetual license. ColdFusion 2023 is also still in core support.

Not sure which path fits your app?

Adobe ColdFusion and Lucee specialists for 20+ years. Book a free consultation and get a straight answer.

Book a Free Consultation