The original headline is: "Max-Severity Adobe ColdFusion RCE (CVE-2026-48282) Is Now Under Active Attack"

Short summary

Adobe ColdFusion CVE-2026-48282, a maximum-severity unauthenticated RCE, is under active attack days after July 1 patch release. Organizations with internet-exposed instances must patch within 72 hours; exploitation began 48 hours post-disclosure. Approximately 800 publicly visible ColdFusion servers are at risk; assume compromise for any exposed host.

• •Max-severity unauthenticated RCE (CVE-2026-48282) under active exploitation
• •Patch required within 72 hours; exploitation confirmed 48 hours after disclosure
• •~800 internet-facing ColdFusion instances visible; patch and hunt for compromise on any exposed host

Generated with AI, which can make mistakes.