Whatever message this page gives is out now! Go check it out!

ColdFusion (2025 release) Performance Monitoring Toolset Update 2

Last update:
Aug 11, 2026

Overview

ColdFusion (2025 release) Performance Monitoring Toolset Update 2 (release date, 11 Aug, 2026) includes fixes for critical arbitrary code execution vulnerabilities. For additional details, see Security Bulletin APSB26-90.

What's new and changed

  • The ColdFusion Performance Monitoring Toolset has a full installer and can be downloaded from ColdFusion Downloads.
  • Auto Discovery button removed: The Auto Discovery button has been removed from both the full and hotfix installers. The Auto Discovery toggle under Settings > ColdFusion Servershas also been removed.
  • Elasticsearch authentication: Elasticsearch authentication has been introduced in the full installer, with Elasticsearch configured as the default user. For users who prefer to configure authentication manually, view the SSL/TLS configuration guide.
  • Library upgrades: The following libraries are upgraded:
    • tike-core
    • tika-parser-pdf-module
    • undertow-core
    • netty-codec-http2
    • json-smart
    • netty-handler
    • nimbus-jose-jwt
    • protobuf-java
    • java/jdk

Prerequisites

Note: On 64-bit computers, use 64-bit JRE for 64-bit Performance Monitoring Toolset.
If the Performance Monitoring Toolset server is behind a proxy, specify the proxy settings for the server to get the update notification and download the updates. Specify proxy settings using the system properties below in the jvm.config, or provide the proxy settings in Performance Monitoring Toolset dashboard (Settings > Updates > Settings)
  • http.proxyHost
  • http.proxyPort
  • http.proxyUser
  • http.proxyPassword

Installation

Note: In Performance Monitoring Toolset, on Windows, the Datastore must be stopped manually before installing or uninstalling the update and then manually restarted afterwards.
For non-Windows, the update can be installed through the PMT dashboard or command-line.
If you get the following error when installing the update using the Download or Download and Install option, ensure that the folder {pmt_install_home}/hf-updates has write permission: "Error occurred while installing PMT update. Please try again."
The backup is located at {pmt_install_home}/hf-updates/hf-2025-00002-330224/backup.

Installing the update manually

Click the link to download the JAR. The MD5 checksum is: da71143d3826f250ba61ade8b3ef0f80
Execute the following command on the downloaded JAR. You must have privileges to start or stop Performance Monitoring Toolset and Datastore services.
  • Windows: pmt_install_home/jre/bin/java.exe -jar jar-file-dir/hotfix-002-330224.jar
  • Linux-based platforms: pmt_install_home/jre/bin/java -jar jar-file-dir/hotfix-002-330224.jar
Ensure that the JRE bundled with Performance Monitoring Toolset is used for executing the downloaded JAR.
Install the update from a user account that has permissions to restart Performance Monitoring Toolset and Datastore services.

Post installation

After applying this update, the ColdFusion Performance Monitoring Toolset build number should be 2025,0,02,330224.

Uninstallation

Before uninstalling on Windows, stop the Datastore service.
To uninstall the update, perform one of the following:
  • In Performance Monitoring Toolset Dashboard, select Uninstall in Settings > Updates > Installed Updates.
  • Run the uninstaller for the update from the command prompt. For example, java -jar {pmt_install_home}/hf-updates/hf-2025-00002-330224/uninstall/uninstaller.jar

Share this page

Was this page helpful?
We're glad. Tell us how this page helped.
We're sorry. Can you tell us what didn't work for you?
Thank you for your feedback. Your response will help improve this page.

On this page