Known Exploited Vulnerabilities December 16, 2024 · CISA KEV Catalog

CVE-2024-20767: Adobe Cold Fusion Improper Access Control Vulnerability

Adobe ColdFusion contains an improper access control vulnerability that could allow an attacker to access or modify restricted files via an internet-exposed admin panel.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: Adobe CVE-2024-20767
Related: CVE-2026-48356: Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability Known Exploited Vulnerabilities · Oct 27, 2026
CVE-2026-71362: Adobe Commerce and Magento Incorrect Authorization Vulnerability Known Exploited Vulnerabilities · Sep 24, 2026
CVE-2026-75650: Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability Known Exploited Vulnerabilities · Sep 08, 2026