Exploit / PoCcriticalExploited in the wild

Adobe fixed Cold Fusion flaw listed as under active exploit

Security Affairsby @securityaffairsMar 14, 2023 · 18:51 UTC (Mar 14, 2023)1 min read4 · 2 reads

Read at securityaffairs.com

Analyze CVE-2023-26360 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-26360 CVE-2023-26359 CVE-2023-26361

Tags: cve-2023-26360 cve-2023-26359 cve-2023-26361 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-26359 +2 related CVEs CVE-2023-26360 CVE-2023-26361	Unauthenticated Deserialization RCE in Adobe ColdFusion 2018 and 2021	9.8 group max	17%	KEV	Mar 23, 2023 KEV Aug 21, 2023

From the original article

1 min read at securityaffairs.com

Adobe is warning that a critical zero-day flaw in ColdFusion web app development platform was exploited in very limited attacks. Software giant Adobe released security updates for ColdFusion versions 2021 and 2018 to resolve a critical flaw, tracked as CVE-2023-26360 (CVSS base score 8. 6), that was exploited in very limited attacks.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.