ColdFusion Vulnerability Now Exploited in Attacks
A newly disclosed ColdFusion vulnerability has moved from a patch-management concern into an active security emergency. Attackers began targeting exposed servers shortly after technical details became public, leaving administrators with almost no comfortable window for delay. The flaw, tracked as CVE-2026-48282, can allow an unauthenticated attacker to execute code remotely on vulnerable Adobe ColdFusion systems. […]