Prevent and detect Adobe ColdFusion exploitation (CVE-2023-26360, CVE-2023-26359)
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2023-26359+2 related CVEs | Unauthenticated Deserialization RCE in Adobe ColdFusion 2018 and 2021 | 9.8 group max | 17% | KEV | KEV |
From the original article
2 min read at helpnetsecurity.com
When Adobe released security updates for its ColdFusion application development platform last month , it noted that one of the vulnerabilities (CVE-2023-26360) had been exploited in the wild “in very limited attacks.” Were your servers among those hit? And what should you do if they were?
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.