CVE-2023-29298 is a vulnerability tracked by ThreatCluster, appearing in 2 threat clusters built from 3 intelligence report mentions.
CVE-2023-29298 is a vulnerability tracked across 2 threat clusters and 3 intelligence report mentions on ThreatCluster. First observed June 29, 2026; most recent activity July 2, 2026.
A multi-stage cyber attack targeted IIS servers, beginning with enumeration commands and escalating to credential extraction using Mimikatz. The attackers uploaded a steganographic webshell and executed a…
Rapid7 disclosed an access control bypass vulnerability in Adobe ColdFusion, identified as CVE-2023-29298, which affects versions 2018u16, 2021u6, and 2023. The vulnerability allows attackers to access restricted…
CVE-2023-29298 is a vulnerability tracked by ThreatCluster, appearing in 2 threat clusters built from 3 intelligence report mentions.
The most recent intelligence report mentioning CVE-2023-29298 on ThreatCluster is dated July 2, 2026. Activity was first observed June 29, 2026, giving a tracked span from then to July 2, 2026.
Across ThreatCluster reporting, CVE-2023-29298 most frequently co-occurs with Malware, Phishing, Portugal, Spain, CVE-2023-26360, among 12 tracked related entities.
The most significant recent cluster is “Attackers Exploit WDigest Vulnerability to Harvest Plaintext Credentials” (3 articles · Updated July 2, 2026). CVE-2023-29298 appears across 2 threat clusters in total, listed above with sources.
CVE-2023-29298 appears in 3 intelligence report mentions across 2 deduplicated threat clusters, aggregated from 17,000+ monitored sources.