A critical vulnerability in Adobe's ColdFusion web application platform is being actively exploited by attackers just days after a patch was released, posing a severe risk to unpatched servers.