VulnerabilitycriticalExploited in the wild

Hackers Exploited ColdFusion Vulnerability to Breach Federal Agency Servers

The Hacker Newsby @TheHackersNewsDec 9, 2023 · 05:09 UTC (Dec 9, 2023)2 min read4 · 1 read

Read at thehackernews.com

Analyze CVE-2023-26360 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-26360

Tags: cve-2023-26360 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-26360	Unauthenticated RCE via Improper Access Control in Adobe ColdFusion	8.6	97%	KEVPoC	Mar 23, 2023 KEV Mar 15, 2023

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  Dec 06, 2023 Vulnerability / Web Server Security The U. S. Cybersecurity and Infrastructure Security Agency (CISA) warned of active exploitation of a high-severity Adobe ColdFusion vulnerability by unidentified threat actors to gain initial access to government servers.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.