ColdFusion Process Spawning Command Shell (Possible CVE-2023-26360/29298 Exploit

Ibrahim Saud@tektrix

•updated 14 days ago•0•0•4

Detects instances where the Adobe ColdFusion service (jrun.exe or java.exe) spawns common command-line shells, administrative tools, or utility processes. This behavior is indicative of potential exploitation of ColdFusion vulnerabilities, such as CVE-2023-26360 or CVE-2023-29298, where an adversary gains initial access and executes commands on the underlying system.