CISA has added a critical vulnerability impacting Adobe ColdFusion versions 2021 and 2018 to its catalog of security bugs exploited in the wild. This critical arbitrary code execution flaw ...

Update 7/17/23: The article was updated due to a mistaken warning added by Adobe to its email notification. However, a newer version of the bug was seen by Rapid7 to be actively exploited. Hackers are ...

Fortinet has observed significant threat exploitation targeting Adobe ColdFusion, a web development computing platform. Since those updates, however, Fortinet’s FortiGuard Labs IPS telemetry data has ...

Two vulnerabilities in the Adobe ColdFusion platform are being actively exploited by threat actors in a series of cyber attacks, apparently after a proof of concept (PoC) for one of them was ...

Due to ongoing attacks, administrators should update their Adobe ColdFusion instances and Fortinet firewalls to the latest version. The exploited vulnerabilities have been known for several years in ...

Adobe patches a flaw found in two versions of ColdFusion It warned users to patch ASAP, since a PoC is available The bug can be used to create or overwrite critical Adobe has fixed a high-severity ...

The security bug in Adobe ColdFusion was exploited as zero day before the software maker fixed it in mid-March. However, the use of outdated versions of the software prompted the U.S. Cybersecurity ...