SecurityWeek • 2h
Adobe Patches Critical RCE Vulnerabilities in ColdFusion and Campaign Classic
Adobe has released urgent patches for seven critical vulnerabilities affecting Adobe ColdFusion and Adobe Campaign Classic, with several carrying a maximum CVSS v3.1 score of 10.0. These flaws enable unauthenticated remote code execution (RCE) via deserialization or directory traversal vectors, allowing attackers to gain full system privileges with minimal interaction. Exploitation leads to a total compromise of the confidentiality, integrity, and availability (CIA) triad, facilitating lateral movement within enterprise networks and providing a primary entry point for ransomware deployment. Immediate patching is required to mitigate the risk of complete server takeover.
Links:securityweek.com, bleepingcomputer.com, Thehackernews, Oodaloop, Reddit, Radar, Youtube, Secpod, Secure-iss •