CVE-2010-2861

Adobe ColdFusion's directory traversal vulnerability allowed attackers to read arbitrary files via the administrator console, and is currently being exploited in the wild, often linked to ransomware attacks.

A directory traversal vulnerability in Adobe ColdFusion's administrator console enabled unauthorized file access, posing a significant risk to DIB organizations using the platform. This exposes sensitive data and increases the likelihood of ransomware infection, potentially impacting CMMC compliance. Organizations should immediately patch ColdFusion and review access controls.

Shame score — The vulnerability's exploitation in the wild and association with ransomware demonstrates a serious and avoidable security lapse in a widely-used platform.