ColdFusion and SimpleHelp: Two-Hour Exploitation Timelines
ColdFusion and SimpleHelp: Two-Hour Exploitation Timelines
Two critical vulnerabilities are under active exploitation right now, with direct implications for UK small businesses. Adobe ColdFusion CVE-2026-48282 carries a perfect CVSS 10.0 score and was weaponised within two hours of public disclosure. The vulnerability allows unauthenticated remote code execution on affected servers. Meanwhile, SimpleHelp RMM CVE-2026-48558 enables attackers to create Technician accounts on unpatched servers, granting access to every client system managed through that infrastructure. Hundreds of vulnerable…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.