ColdFusion

Mentions · 7d2
Mentions · 30d2
All mentions4
First seenSep 8, 2026
Last mentioned3d ago

Timeline

4 articles · newest first

CISA adds Adobe CVE-2026-48356 to KEV after July advisories

Canada’s Cyber Centre points admins to July Adobe fixes covering After Effects, ColdFusion, AEM and other products.

Canadian Centre for Cyber Securityupdated Oct 28, 10:05 UTC · 2d agofirst Oct 27, 20:41 UTC · 3d agoExploit / PoCExploited10 sourcesCVE-2026-483561

Leftover PHP on a ColdFusion IIS server broke sign-in during mitigation

A host-wide IIS rule blocked every multipart form, not just .php requests, until the author narrowed it.

Hacker News · securityOct 26, 22:27 UTC · 4d agoIndustry HN 22 points · 15 comments1

Adobe security advisory (AV26-808) – Update 1

Canada's Cyber Centre updated Adobe advisory AV26-808 to flag that CVE-2026-71362 in Adobe Commerce is being exploited in the wild.

Canadian Centre for Cyber SecuritySep 10, 16:03 UTC · Sep 10, 2026AdvisoryExploitedCVE-2026-713622 · 1 read

Adobe Patches Over 170 Vulnerabilities, Including Commerce Zero-Day

Adobe patched over 170 flaws, including in-the-wild zero-day CVE-2026-75650 (CVSS 10) in Adobe Commerce/Magento enabling unauthenticated RCE and web shell deployments.

SecurityWeekSep 8, 18:37 UTC · Sep 8, 2026Exploit / PoCExploitedCVE-2026-75650 CVE-2026-82004 CVE-2026-48273+12 · 1 read

Related CVEs

by mentions

CVE-2026-756504%10.0
Unauthenticated Template Injection RCE in Adobe Commerce and Magento (CVE-2026-75650)
published Sep 7, 2026Adobe CommerceKEVPoC ×2
CVE-2026-4835645%9.3
Unrestricted dangerous file upload in Adobe Commerce and Magento
published Jul 14, 2026Adobe CommerceKEV
CVE-2026-7136290%9.1
Unauthenticated Privilege Escalation Flaw in Adobe Commerce (Magento)
published Aug 11, 2026Adobe Commerce (Magento)KEVPoC
CVE-2026-820041%10.0
Unauthenticated OS Command Injection in Adobe Campaign Classic
published Sep 8, 2026Adobe Campaign Classic (ACC)
CVE-2026-482732%9.9
Eval Injection RCE in Adobe ColdFusion (CVSS 9.9, low-privileged attacker)
published Sep 8, 2026Adobe ColdFusion
CVE-2026-757461%9.1
SQL Injection Leading to Arbitrary Code Execution in Adobe ColdFusion
published Sep 8, 2026Adobe ColdFusion

Appears with

Adobevendor · 3
Adobe Commerceproduct · 3
Experience Managerproduct · 2
Luceeproduct · 1
Bridgeproduct · 1
CISAorganization · 1
IISproduct · 1
StyleSmugglermalware · 1
Acrobat Readerproduct · 1
Sansecvendor · 1
After Effectsproduct · 1
Lightroom Classicproduct · 1
Creative Cloud Desktopproduct · 1
Campaign Classicproduct · 1
Magento Open Sourceproduct · 1
Animateproduct · 1

Entities are extracted by the model from each article. First seen Sep 8, 2026, last mentioned 3d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.