Adobe ColdFusion CVE‑2026‑48282 Exploited Within Hours of Disclosure
Attackers began leveraging the CVE‑2026‑48282 path‑traversal flaw in ColdFusion 2025.9, 2023.20 and earlier just two hours after Adobe released patches, achieving remote code execution on unpatched servers. Administrators must apply the emergency update immediately to stop active exploitation.