Hackers Exploited ColdFusion Vulnerability to Breach Federal Agency Servers

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned of active exploitation of a high-severity Adobe ColdFusion vulnerability by unidentified threat actors to gain initial access to government servers.
"The vulnerability in ColdFusion (CVE-2023-26360) presents as an improper access control issue and exploitation of this CVE can result in arbitrary code execution,"

access access control adobe adobe coldfusion agency arbitrary code breach cisa code coldfusion control cve cve-2023-26360 cybersecurity exploitation exploited federal federal agency government hackers high infrastructure infrastructure security initial access issue result security servers severity threat threat actors vulnerability