SecurityWeek

Critical Adobe ColdFusion Vulnerability Exploited in Attacks

Hackers are exploiting a critical vulnerability (CVE-2026-48282) in Adobe ColdFusion that carries a CVSS score of 10/10.
The Hacker News

Adobe Patches 7 CVSS 10.0 Flaws in ColdFusion and Campaign Classic

ColdFusion 2023 Update 21, 2025 Update 10, and ACC v7 build 9397 fix code execution bugs; no exploits reported.
SecurityWeek

CISA Urges Immediate Patching of Exploited ColdFusion, Langflow, Joomla Flaws

Two newly disclosed critical vulnerabilities in Adobe ColdFusion and Langflow join two Joomla extension flaws in CISA's Known ...
Bleeping Computer

Critical code execution vulnerability fixed in Adobe ColdFusion

Adobe has released out-of-band security updates to address a critical vulnerability impacting ColdFusion versions 2021, 2016, and 2018. Today's emergency updates patch an arbitrary code execution ...
Neowin

A patched Adobe ColdFusion is being exploited in the wild, update now

Adobe’s rapid web-application development platform, Adobe ColdFusion, received a patch earlier this month that fixes several exploits, including CVE-2026-48282. However, users need to ensure they ...
Threat Post

Adobe Breached, Acrobat and ColdFusion Code Stolen Along with 2.9M Customer Records

Adobe announced it has been breached and attackers may have accessed source code for a number of products, and stolen 2.9 million customer records. Attackers accessed customer IDs, encrypted passwords ...