Thousands of ColdFusion exploit attempts spotted during Christmas holiday

Securityaffairs.Co •Pierluigi Paganini • January 3, 2026

GreyNoise observed thousands of attacks targeting a dozen Adobe ColdFusion vulnerabilities during the Christmas 2025 holiday. GreyNoise reports a coordinated campaign exploiting a dozen Adobe ColdFusion vulnerabilities, with thousands of attack attempts observed during the Christmas 2025 holiday. “GreyNoise observed a coordinated exploitation campaign targeting Adobe ColdFusion servers over the Christmas 2025 holiday period.” reads […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Coordinated ColdFusion Exploit Campaign During Christmas 2025 During the Christmas 2025 holiday, GreyNoise reported thousands of attack attempts targeting a dozen Adobe ColdFusion vulnerabilities. This coordinated exploitation campaign primarily affected ColdFusion servers, indicating a significant threat to organizations using this software. 2 sources 27

Extracted Entities

Platforms (1)

Adobe ColdFusion