Search: “coldfusion”

133 stories

Help Net SecurityJul 7, 00:00 UTC · Jul 7, 2026Vulnerability in the wildCVE-2026-48282

Federal agency breached through Adobe ColdFusion vulnerability

The RecordDec 5, 18:00 UTC · Dec 5, 2023Data breach in the wildCVE-2023-26360

Thousands of ColdFusion exploit attempts spotted during Christmas holiday

Security AffairsJan 4, 12:31 UTC · Jan 4, 2026Vulnerability CVE-2023-26359 CVE-2023-38205 CVE-2023-44353+7 CVEs1

Adobe out-of-band update addresses an actively exploited ColdFusion zero

Security AffairsJul 20, 07:40 UTC · Jul 20, 2023Exploit / PoC in the wildCVE-2023-38204 CVE-2023-38205 CVE-2023-38206+3 CVEs

Adobe is aware that ColdFusion bug CVE-2024

Security AffairsDec 24, 15:36 UTC · Dec 24, 2024Exploit / PoC in the wildCVE-2024-53961 CVE-2024-20767

Threat actors breached US govt systems by exploiting Adobe ColdFusion flaw

Security AffairsDec 6, 00:56 UTC · Dec 6, 2023Data breach in the wildCVE-2023-26360

Adobe Patches Three CVSS 10.0 ColdFusion and Campaign Classic Flaws

Adobe patches seven flaws in ColdFusion, Commerce, and Campaign Classic, including actively exploited CVE-2026-71362 enabling customer account takeover.

Adobe issued Priority 1 updates fixing CVSS 10.0 flaws in ColdFusion (CVE-2026-48362, OS command injection) and Campaign Classic (CVE-2026-71398, CVE-2026-27302, incorrect authorization), plus CVE-2026-71362 (CVSS 9.1) in Adobe Commerce and Magento Open Source. Sansec reports threat actors are actively exploiting CVE-2026-71362 to switch customer sessions to other accounts and access private customer data. Adobe-hosted Campaign Classic instances are already remediated, while on-premise deployments are urged to patch within 72 hours. ColdFusion fixes ship in versions 2025.0.12 and 2023.0.23, and Campaign Classic fixes in v7 7.4.4 build 9400.

The Hacker NewsAug 15, 00:00 UTC · Aug 15, 2026Vulnerability in the wildCVE-2026-48362 CVE-2026-48273 CVE-2026-71384+5 CVEs

U.S. CISA adds Adobe ColdFusion, Joomlack Page Builder, Langflow, and JoomShaper SP Page Builder flaws to its Known Exploited Vulnerabilities catalog

Security AffairsJul 8, 08:38 UTC · Jul 8, 2026Exploit / PoC in the wildCVE-2026-48282 CVE-2026-48908 CVE-2026-55255+2 CVEs

Adobe Patches 7 CVSS 10.0 Flaws in ColdFusion and Campaign Classic

The Hacker NewsJul 3, 10:17 UTC · Jul 3, 2026Vulnerability in the wildCVE-2026-48276 CVE-2026-48283 CVE-2026-48277+7 CVEs

Adobe fixed multiple maximum-severity flaws in ColdFusion and Campaign Classic

Security AffairsJul 2, 09:28 UTC · Jul 2, 2026Threat actor in the wildCVE-2026-48276 CVE-2026-48283 CVE-2026-48277+7 CVEs

CISA adds critical Adobe ColdFusion flaw to its Known Exploited Vulnerabilities catalog

Security AffairsAug 22, 08:20 UTC · Aug 22, 2023Exploit / PoC in the wildCVE-2023-26359

Adobe ColdFusion vulnerabilities exploited to deliver web shells (CVE-2023-29298, CVE-2023-38203)

Help Net SecurityJul 20, 07:53 UTC · Jul 20, 2023Vulnerability in the wildCVE-2023-29298 CVE-2023-38203 CVE-2023-29300+2 CVEs

New Vulnerabilities Found in Adobe ColdFusion

Infosecurity MagazineJul 18, 17:30 UTC · Jul 18, 2023Vulnerability in the wildCVE-2023-29298 CVE-2023-29300 CVE-2023-382031

Adobe Patch Tuesday updates fix code execution issues in Campaign, ColdFusion, and Flash

Security AffairsJun 11, 22:36 UTC · Jun 11, 2019Vulnerability CVE-2019-7838 CVE-2019-7839 CVE-2019-7840+2 CVEs

Adobe Patch Tuesday for September 2018 fixes 10 flaws in Flash Player and ColdFusion

Security AffairsSep 11, 21:39 UTC · Sep 11, 2018Vulnerability CVE-2018-15967

Hackers Exploit Maximum Severity Adobe ColdFusion Flaw

Infosecurity MagazineJul 7, 08:20 UTC · Jul 7, 2026Exploit / PoC in the wildCVE-2026-48282

Adobe Patches 11 Critical ColdFusion Flaws Amid 30 Total Vulnerabilities Discovered

The Hacker NewsApr 9, 03:12 UTC · Apr 9, 2025Vulnerability CVE-2025-24446 CVE-2025-24447 CVE-2025-30281+19 CVEs

Prevent and detect Adobe ColdFusion exploitation (CVE-2023-26360, CVE-2023-26359)

Help Net SecurityDec 6, 09:33 UTC · Dec 6, 2023Vulnerability in the wildCVE-2023-26360 CVE-2023-26359 CVE-2023-26361

Critical Adobe ColdFusion Flaw Added to CISA's Exploited Vulnerability Catalog

The Hacker NewsAug 22, 03:40 UTC · Aug 22, 2023Vulnerability in the wildCVE-2023-26359 CVE-2023-26360

CISA adds Adobe ColdFusion bug to Known Exploited Vulnerabilities Catalog

Security AffairsMar 16, 08:47 UTC · Mar 16, 2023Exploit / PoC in the wildCVE-2023-26360 CVE-2023-23397 CVE-2023-24880+1 CVEs

Adobe addresses five issues in ColdFusion, After Effects, Digital Editions

Security AffairsApr 14, 19:35 UTC · Apr 14, 2020Exploit / PoC CVE-2020-3767 CVE-2020-3768 CVE-2020-3796+2 CVEs

251 Amazon-Hosted IPs Used in Exploit Scan Targeting ColdFusion, Struts, and Elasticsearch

The Hacker NewsMay 28, 09:23 UTC · May 28, 2025Vulnerability in the wildCVE-2018-15961 CVE-2017-5638 CVE-2022-26134+2 CVEs

U.S. CISA adds Microsoft Windows Kernel-Mode Driver and Adobe ColdFusion flaws to its Known Exploited Vulnerabilities catalog

Security AffairsDec 17, 10:35 UTC · Dec 17, 2024Exploit / PoC in the wildCVE-2024-35250 CVE-2024-20767 CVE-2024-49138