CVE-2023-26360

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

June 29, 2026

Last Seen

July 2, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Attackers Exploit WDigest Vulnerability to Harvest Plaintext Credentials74.0

A multi-stage cyber attack targeted IIS servers, beginning with enumeration commands and escalating to credential extraction using Mimikatz. The attackers uploaded a steganographic webshell and executed a defense-impairment script (i.bat) that disabled logging and security services. Initial forensic...