I hate it when CF is on this website. But the good news is that Adobe is on top of things with patches. https://www.bleepingcomputer.com/news/security/critical-coldfusion-flaws-exploited-in-attacks-to-drop-webshells/

That's the most details I've seen about these exploits. Thanks for posting!