CISA orders feds to patch max severity ColdFusion flaw by Friday

Published on July 8, 2026

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered government agencies to patch an actively exploited maximum-severity flaw in the Adobe ColdFusion commercial web app development platform by Friday. [...]

Continue reading on website
Other news

15-Year-Old GhostLock Flaw Enables Root and Container Escape on Most Linux Distros

July 8, 2026
Researchers at Nebula Security have disclosed GhostLock (CVE-2026-43499), a 15-year-old Linux kernel flaw that lets any logged-in user take full root control of a machine that has not been patched.The vulnerable code has shipped by default in essentially every mainstream distribution since 2011. The flaw needs no special permission, no unusual settings, and no network

Ubiquiti warns of new max severity UniFi OS vulnerability

July 8, 2026
Ubiquiti has released security updates to patch seven critical vulnerabilities in UniFi OS, including a maximum-severity flaw that can be exploited in command injection attacks. [...]