MEDIUM/ JULY 7, 2026TODAY’S BRIEFING — #109
Adobe ColdFusion RCE, Linux KVM escape, Gitea authentication bypass under active attack
Adobe ColdFusion max-severity RCE actively exploited; Linux KVM escape (CVE-2026-53359) affects Intel/AMD hosts; Gitea Docker auth bypass (CVE-2026-20896, CVSS 9.8) probed within 13 days; Iranian MOIS-linked group deploys new Cavern C2 framework against Israeli IT providers.
CVE-2026-48282Adobe ColdFusion — Maximum-severity RCE actively exploited in the wildCVE-2026-53359Linux KVM Hypervisor — Use-after-free flaw enabling guest-to-host VM escape on Intel/AMD x86; 16-year-old vulnerabilityCVE-2026-20896Gitea Docker Images — Critical authentication bypass (CVSS 9.8) via X-WEBAUTH-USER header; threat actors probing 13 days post-disclosure
Read the full briefing →