CISA Known Exploited Vulnerabilities Directory

Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.

Showing 1–10 of 16 records

CVE Vendor Product Added Due Status
CVE-2026-48282 — Adobe ColdFusion Path Traversal Vulnerability
Adobe ColdFusion contains a path traversal vulnerability that could lead to arbitrary code execution in the context of the current user.
 Adobe ColdFusion Jul 7, 2026 Jul 10, 2026
CVE-2017-3066 — Adobe ColdFusion Deserialization Vulnerability
Adobe ColdFusion contains a deserialization vulnerability in the Apache BlazeDS library that allows for arbitrary code execution.
 Adobe ColdFusion Feb 24, 2025 Mar 17, 2025
CVE-2024-20767 — Adobe ColdFusion Improper Access Control Vulnerability
Adobe ColdFusion contains an improper access control vulnerability that could allow an attacker to access or modify restricted files via an internet-exposed admin panel.
 Adobe ColdFusion Dec 16, 2024 Jan 6, 2025
CVE-2023-29300 — Adobe ColdFusion Deserialization of Untrusted Data Vulnerability
Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for code execution.
 Adobe ColdFusion Jan 8, 2024 Jan 29, 2024 Ransomware
CVE-2023-38203 — Adobe ColdFusion Deserialization of Untrusted Data Vulnerability
Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for code execution.
 Adobe ColdFusion Jan 8, 2024 Jan 29, 2024 Ransomware
CVE-2023-26359 — Adobe ColdFusion Deserialization of Untrusted Data Vulnerability
Adobe ColdFusion contains a deserialization of untrusted data vulnerability that could result in code execution in the context of the current user.
 Adobe ColdFusion Aug 21, 2023 Sep 11, 2023
CVE-2023-29298 — Adobe ColdFusion Improper Access Control Vulnerability
Adobe ColdFusion contains an improper access control vulnerability that allows for a security feature bypass.
 Adobe ColdFusion Jul 20, 2023 Aug 10, 2023
CVE-2023-38205 — Adobe ColdFusion Improper Access Control Vulnerability
Adobe ColdFusion contains an improper access control vulnerability that allows for a security feature bypass.
 Adobe ColdFusion Jul 20, 2023 Aug 10, 2023
CVE-2023-26360 — Adobe ColdFusion Deserialization of Untrusted Data Vulnerability
Adobe ColdFusion contains a deserialization of untrusted data vulnerability that allows for remote code execution.
 Adobe ColdFusion Mar 15, 2023 Apr 5, 2023
CVE-2010-2861 — Adobe ColdFusion Directory Traversal Vulnerability
A directory traversal vulnerability exists in the administrator console in Adobe ColdFusion which allows remote attackers to read arbitrary files.
 Adobe ColdFusion Mar 25, 2022 Apr 15, 2022 Ransomware