ColdFusion

Weekly CVE Report: 1,571 New Flaws and 6 Actively Exploited Bugs (July 6–12, 2026) weekly CVE report actively exploited vulnerabilities

weekly CVE report actively exploited vulnerabilities

Weekly CVE Report: 1,571 New Flaws and 6 Actively Exploited Bugs (July 6–12, 2026)

Do Son July 13, 2026

Last week brought a heavy load for defenders. This weekly CVE report from CVE WATCHTOWER counts 1,571...

Weekly Threat Intelligence: The July 2026 Breaches Weekly Threat Intelligence Active Vulnerability Report

Weekly Threat Intelligence Active Vulnerability Report

Weekly Threat Intelligence: The July 2026 Breaches

Do Son July 6, 2026

Welcome to the latest weekly threat intelligence briefing. Our cyber defense team processed 1,939 new vulnerabilities between...

Active ColdFusion Arbitrary Code Execution Flaw Scores CVSS 10 Diagram showing ColdFusion arbitrary code execution path traversal vulnerability.

Diagram showing ColdFusion arbitrary code execution path traversal vulnerability.

Active ColdFusion Arbitrary Code Execution Flaw Scores CVSS 10

Do Son July 3, 2026

TL;DR CVE-2026-48282, a critical CVSS 10 ColdFusion arbitrary code execution vulnerability, is under active attack. Hackers are...

Adobe Rushes Patches for Critical ColdFusion RCE and Security Bypasses ColdFusion RCE Adobe Security Patch

ColdFusion RCE Adobe Security Patch

Adobe Rushes Patches for Critical ColdFusion RCE and Security Bypasses

Do Son April 15, 2026

Adobe has released an urgent set of security updates to address multiple vulnerabilities within its ColdFusion 2025...

🚨

Receive alerts for vulnerabilities being exploited in the wild.

⚡

Get notified instantly when a Proof of Concept (PoC) exploit is published.

🔍

Access critical info on vulnerabilities even when marked as "RESERVED".

🧠

Insights powered by decades of expertise and global intelligence sources.

🎯

Customize alerts with up to 10 keywords for your specific tech stack.

📊

Export the raw CVE database for SIEM integration and reporting.

CVE-2026-16723CVSS 9.0
A remote code execution (RCE) vulnerability exists in fastjson 1.2.68 through 1.2.83. This vulnerability is exploitable under fastjson\'s stock...
Admin intel📅 Updated: Jul 25, 2026
CVE-2026-16232CVSS 9.1
An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain...
CISA KEV📅 Added to KEV: Jul 22, 2026
CVE-2026-50522CVSS 9.8
Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.
Admin intelCISA KEV📅 Added to KEV: Jul 22, 2026📅 Updated: Jul 21, 2026
CVE-2026-63030CVSS 9.8
WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion...
Admin intelCISA KEV📅 Added to KEV: Jul 21, 2026📅 Updated: Jul 21, 2026
CVE-2026-60137CVSS 5.9
WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the author__not_in parameter...
Admin intelCISA KEV📅 Added to KEV: Jul 21, 2026📅 Updated: Jul 21, 2026
CVE-2026-0770CVSS 9.8
Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability. This vulnerability allows remote attackers...
CISA KEV📅 Added to KEV: Jul 21, 2026
CVE-2021-27137CVSS 8.1
An issue was discovered in router/upnp/src/ssdp.c in DD-WRT before 45724. An unsafe strcpy in the UPnP handling functionality...
CISA KEV📅 Added to KEV: Jul 21, 2026
CVE-2026-6875CVSS 9.5
ServiceNow has addressed a remote code execution vulnerability that was identified in the ServiceNow AI platform. This vulnerability...
Admin intel📅 Updated: Jul 18, 2026