Vulnerabilitycritical
CMS Provider Sitecore Patches Exploited Critical Zero Day
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-53690 | Unauthenticated ViewState Deserialization RCE in Sitecore XM/XP | 9.0 | 61% | KEVPoC | KEV |
From the original article
3 min read at infosecurity-magazine.com
Security analysts at the Mandiant Threat Defense team have disrupted an attack exploiting a zero-day vulnerability in Sitecore, a popular content management system (CMS) used by companies such as HSBC, L’Oréal, Toyota and United Airlines. In a report published on September 3, Mandiant, part of Google Cloud, said that the attack leveraged exposed ASP.
By Kevin Poireault · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.