Hackers Exploit Maximum Severity Adobe ColdFusion Flaw

Adobe released APSB26-68 fixing 11 ColdFusion flaws — six with CVSS 10 — and security researchers reported that CVE-2026-48282 (a path traversal enabling potential arbitrary code execution) was targeted within hours of public disclosure; ShadowServer reports ~775 exposed ColdFusion instances online and Adobe has moved to twice-monthly security bulletins to keep pace with accelerated discovery and exploitation, while stating it was not yet aware of confirmed in-the-wild exploitation at the time of writing.