CISA has added a critical vulnerability impacting Adobe ColdFusion versions 2021 and 2018 to its catalog of security bugs exploited in the wild.

Adobe has released today an emergency out-of-band update for its ColdFusion development platform that patches a zero-day vulnerability that was being exploited in the wild.

ColdFusion hack used to steal hosting provider’s customer data Linode hit by possible zero-day exploit patched by Adobe on April 9.