Do Son CISA added four actively exploited flaws to its KEV Catalog, including critical Joomla, Langflow, and ColdFusion bugs. Agencies must patch by July 10.
Adobe ColdFusion
Eleven Adobe ColdFusion vulnerabilities include six CVSS 10 arbitrary code execution flaws. Patch ColdFusion 2025 and 2023 now.
Adobe patches a critical ColdFusion flaw (CVE-2025-61808) that uses remote SMB shares and CAR files to bypass security and achieve total server takeover.
GreyNoise reveals a massive Japan-based holiday campaign: 2.5 million attacks targeting 767 CVEs to harvest access for ransomware gangs.
Learn about CVE-2024-20953 and its impact on cybersecurity. Discover risks associated with Adobe ColdFusion and Oracle Agile PLM.
Urgent security update for Adobe ColdFusion: CVE-2024-53961. Take action now to safeguard your data from potential exploitation and file access.
Urgent warning: Critical Adobe ColdFusion and Windows vulnerabilities being actively exploited by malicious actors. Take action now to protect your system.
Security researcher ma4ter has revealed details of a dangerous security vulnerability (CVE-2024-20767) in Adobe ColdFusion
Identified as CVE-2023-26360, this flaw has been exploited by threat actors for initial access to government servers, as confirmed by CISA
The CVE-2023-26359 vulnerability with a CVSS score of 9.8 is caused by the deserialization of untrusted data.
Adobe released security updates for ColdFusion versions 2021 and 2018 to resolve this critical flaw, tracked as CVE-2023-26360