Linode had an exploit awhile back, from their CF admin interface.

Lucee and CF runtimes are still activily maintained.