LIVE FEED

Check Point gateways hacked via PHP2Shell to deploy VMware ESXi wiperHardening a Personal Linux Server in an AfternoonMicrosoft 365 outage disrupts Outlook, Teams, and Copilot worldwideCheck Point patches zero-day root escalation flaw exploited against customersHackers Compromise 4,800 GitHub Accounts to Steal Cloud CredentialsHow to Put a Self-Hosted Service Behind SSO and Intrusion Blocking in an AfternoonBaker Tilly notifies clients of data breach at third-party provider

Adobe CVEs

Every Adobe vulnerability SECBORN has reported on, with live CVSS severity, CISA known-exploited status and EPSS exploit odds.

15Tracked CVEs 3Known exploited 11Critical 9.0+ 0Covered this week

All Known exploited Critical High This week

15 CVEs EPSSCoverage

10.0CVSS 3.1 CVE-2026-103849 Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336) Adobe · Commerce EPSS 1.2% 1 story 4 weeks ago 9.1CVSS 3.1 CVE-2026-71362 Exploited Adobe Commerce | Incorrect Authorization (CWE-863) Adobe · Commerce and Magento EPSS 92% 1 story 2 months ago 10.0CVSS 3.1 CVE-2026-48282 Exploited ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) Adobe · ColdFusion EPSS 42% 2 stories 4 months ago 8.6CVSS 3.1 CVE-2026-34621 Exploited Acrobat Reader | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (CWE-1321) Adobe · Acrobat and Reader EPSS 7.3% 1 story 4 months ago 10.0CVSS 3.1 CVE-2026-48276 ColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434) Adobe · ColdFusion 2025 EPSS 1.3% 1 story 4 months ago 10.0CVSS 3.1 CVE-2026-48277 ColdFusion | Improper Input Validation (CWE-20) Adobe · ColdFusion 2025 EPSS 1.3% 1 story 4 months ago 10.0CVSS 3.1 CVE-2026-48281 ColdFusion | Improper Input Validation (CWE-20) Adobe · ColdFusion 2025 EPSS 1.4% 1 story 4 months ago 10.0CVSS 3.1 CVE-2026-48286 Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863) Adobe · Campaign Classic EPSS 1.2% 1 story 4 months ago 10.0CVSS 3.1 CVE-2026-48316 ColdFusion | Improper Input Validation (CWE-20) Adobe · ColdFusion 2025 EPSS 1.1% 1 story 4 months ago 10.0CVSS 3.1 CVE-2026-48283 ColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434) Adobe · ColdFusion 2025 EPSS 1.3% 1 story 4 months ago 9.3CVSS 3.1 CVE-2026-48313 ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) Adobe · ColdFusion 2025 EPSS 3.0% 1 story 4 months ago 9.3CVSS 3.1 CVE-2026-48315 ColdFusion | Improper Input Validation (CWE-20) Adobe · ColdFusion 2025 EPSS 1.0% 1 story 4 months ago 8.8CVSS 3.1 CVE-2026-48307 ColdFusion | Cross-site Scripting (Reflected XSS) (CWE-79) Adobe · ColdFusion 2025 EPSS 0.55% 1 story 4 months ago 8.6CVSS 3.1 CVE-2026-48285 ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918) Adobe · ColdFusion 2025 EPSS 0.83% 1 story 4 months ago 6.5CVSS 3.1 CVE-2026-48314 ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) Adobe · ColdFusion 2025 EPSS 0.62% 1 story 4 months ago

Scores and exploit data come from the CVE Program, NVD, CISA and FIRST.org. Each CVE links to SECBORN's reporting on it.