Critical Adobe ColdFusion Vulnerability (CVE-2023-26360) Exploited as a Zero-day

FortiGuard Labs is aware of a report that an improper access control vulnerability in Adobe ColdFusion (CVE-2023-26360) was observed to have been exploited in the wild. Unauthenticated attackers can exploit the vulnerability to achieve arbitrary code execution on a remote machine. On March 15th, CISA added CVE-2023-26360 to the Known Exploited Vulnerability catalog.Why is this Significant?This is significant because Adobe reported that an improper access control vulnerability in Adobe ColdFusion (CVE-2023-26360) was exploited in the wild. CISA also added the …

access access control adobe adobe coldfusion attackers aware catalog cisa code code execution coldfusion control critical cve cve-2023-26360 exploit exploited labs machine march report vulnerability zero-day