CISA Warns of Sitecore RCE Flaws; Active Exploits Hit Next.js and DrayTek DevicesThe Hacker News·Mar 29, 03:45 UTC · Mar 29, 2025Vulnerability in the wildCVE-2019-9874CVE-2019-9875CVE-2020-8515+2 CVEs60
U.S. CISA adds Sitecore CMS and XP, and GitHub Action flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs·Mar 27, 12:31 UTC · Mar 27, 2025Exploit / PoC in the wildCVE-2019-9875CVE-2019-9874CVE-2025-3015460
Hard-Coded 'b' Password in Sitecore XP Sparks Major RCE Risk in Enterprise DeploymentsThe Hacker News·Jun 19, 03:14 UTC · Jun 19, 2025Vulnerability in the wildCVE-2025-34509CVE-2025-34510CVE-2025-34511+3 CVEs60