Hackers Exploited ColdFusion Vulnerability to Breach Federal Agency Servers

🗓️ 06 Dec 2023 10:10:00Reported by The Hacker NewsType

Hackers Exploited ColdFusion Vulnerability to Breach Federal Agency Servers. Adobe ColdFusion vulnerability (CVE-2023-26360) compromised government servers and posed risk of arbitrary code execution. CISA warned of active exploitation and has evidence of reconnaissance activity

Reporter	Title	Published	Views	Family All 58
zdt	Adobe ColdFusion Unauthenticated Remote Code Execution Exploit	2 May 202300:00	–	zdt
zdt	Adobe ColdFusion v 2018,15 (and earlier) and 2021,5 and earlier - Arbitrary File Read Exploit	11 Mar 202400:00	–	zdt
GithubExploit	Exploit for Improper Access Control in Adobe Coldfusion	28 Oct 202504:10	–	githubexploit
GithubExploit	Exploit for Improper Access Control in Adobe Coldfusion	16 May 202619:00	–	githubexploit
GithubExploit	Exploit for Improper Access Control in Adobe Coldfusion	25 Nov 202417:42	–	githubexploit
GithubExploit	Exploit for Improper Access Control in Adobe Coldfusion	14 May 202411:22	–	githubexploit
ICS	Threat Actors Exploit Adobe ColdFusion CVE-2023-26360 for Initial Access to Government Servers	5 Dec 202312:00	–	ics
Tenable Nessus	Adobe ColdFusion Code Execution (APSB23-25) (Direct Check)	1 Aug 202300:00	–	nessus
Tenable Nessus	Adobe ColdFusion < 2018.x < 2018 Update 16 / 2021.x < 2021 Update 6 Multiple Vulnerabilities (APSB23-25)	16 Mar 202300:00	–	nessus
Tenable Nessus	Adobe ColdFusion ComponentFilter Remote Code Execution	31 May 202300:00	–	nessus