CISA has added a critical vulnerability impacting Adobe ColdFusion versions 2021 and 2018 to its catalog of security bugs exploited in the wild.

Adobe has released out-of-band security updates to address a critical ColdFusion vulnerability with proof-of-concept exploit code.

Exploited 0-days, an incomplete fix, and a botched disclosure: Infosec snafu reigns The exploited code-execution flaws are the kind coveted by ransomware and nation-state hackers.