Ntirety - Notice history

Dear Valued Customer,

This notification is to inform you that if your organization is subscribed to our basic patching service, patching will continue to occur during your normally scheduled maintenance window in July.

The Basic patching window begins the third Tuesday of the month and will run over the course of the next 9 days.

If you have any questions, please feel free to contact us at 1-866-918-4678 or through our Success Center portal at https://success.1111systems.com/home.

Thank you for your partnership.

11:11 Systems

Adobe has released a critical security update for Adobe ColdFusion to address multiple vulnerabilities, including CVE-2026-48282, a critical path traversal vulnerability with a CVSS score of 10.0 that may allow an unauthenticated attacker to execute arbitrary code on affected systems. Adobe has also reported that this vulnerability has been actively exploited.

https://www.cve.org/CVERecord?id=CVE-2026-48282

https://helpx.adobe.com/security/products/coldfusion/apsb26-68.html

Who Should Take Action

If you are running any version of Adobe ColdFusion, we recommend reviewing your environment immediately.

ColdFusion 2025: Update to Update 10 or later.

ColdFusion 2023: Update to Update 21 or later.

ColdFusion 2021, 2018, 2016, or earlier: These versions have reached end of life and no longer receive security updates from Adobe. While Adobe's security bulletin applies to supported releases, unsupported versions should be considered at increased security risk because they do not receive fixes for newly discovered vulnerabilities. We strongly recommend upgrading to a supported version of ColdFusion (2023 or 2025) and applying the latest security updates.

Recommended Actions

Schedule a maintenance window to apply the appropriate update or upgrade.

Back up your ColdFusion installation, configuration, and application files.

Download and install the latest supported ColdFusion update from Adobe.

Restart the ColdFusion services after the update is complete.

Verify the installed update level and test your applications to confirm normal operation.

If you are unable to apply the update immediately, implement temporary measures to reduce exposure, such as:

Disable Remote Development Services (RDS) if it is not required.

Restrict external access to the /CFIDE directory and ColdFusion Administrator.

Implement Web Application Firewall (WAF) protections to help detect and block exploit attempts.

Review server logs for suspicious activity.

These measures may reduce risk but do not fully remediate the vulnerability and should only be considered temporary until the appropriate update or upgrade can be completed.

Thank you,

11:11 Support Team

Dear Valued Customer,

This notification is to inform you that if your organization is subscribed to our basic patching service, patching will continue to occur during your normally scheduled maintenance window in June.

The Basic patching window begins the third Tuesday of the month and will run over the course of the next 9 days.

If you have any questions, please feel free to contact us at 1-866-918-4678 or through our Success Center portal at https://success.1111systems.com/home.

Thank you for your partnership.

11:11 Systems