September 2025 CVE LandscapeRecorded Future·Oct 17, 00:00 UTC · Oct 17, 2025Exploit / PoC in the wildCVE-2025-53690CVE-2021-21311CVE-2025-20333+6 CVEs60
Sitecore zero-day vulnerability exploited by attackers (CVE-2025-53690)Help Net Security·Sep 4, 00:00 UTC · Sep 4, 2025Exploit / PoCCVE-2025-5369060
CISA Orders Immediate Patch of Critical Sitecore Vulnerability Under Active ExploitationThe Hacker News·Sep 8, 14:09 UTC · Sep 8, 2025Vulnerability in the wildCVE-2025-53690CVE-2025-30406CVE-2025-393560
CMS Provider Sitecore Patches Exploited Critical Zero DayInfosecurity Magazine·Sep 4, 13:30 UTC · Sep 4, 2025VulnerabilityCVE-2025-5369060
UAT-8837 targets critical infrastructure sectors in North AmericaCisco Talos·Jan 15, 11:00 UTC · Jan 15, 2026Exploit / PoCCVE-2025-5369060
⚡ Weekly Recap: Drift Breach Chaos, Zero-Days Active, Patch Warnings, Smarter Threats & MoreThe Hacker News·Dec 6, 11:14 UTC · Dec 6, 2025Vulnerability in the wildCVE-2025-53690CVE-2025-38352CVE-2025-48543+25 CVEs160
U.S. CISA adds Sitecore, Android, and Linux flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs·Sep 25, 18:23 UTC · Sep 25, 2025Exploit / PoC in the wildCVE-2025-38352CVE-2025-48543CVE-2025-5369060
Week in review: Several companies affected by the Salesloft Drift breach, Sitecore 0-day vulnerabilityHelp Net Security·Sep 7, 00:00 UTC · Sep 7, 2025Vulnerability in the wildCVE-2025-53690CVE-2025-24204CVE-2025-48543+2 CVEs60
China-Linked APT Exploited Sitecore ZeroThe Hacker News·Jan 22, 08:08 UTC · Jan 22, 2026Exploit / PoCCVE-2025-5369060
China-linked APT UAT-8837 targets North American critical infrastructureSecurity Affairs·Jan 17, 15:50 UTC · Jan 17, 2026Exploit / PoCCVE-2025-5369060
Chinese hackers targeting ‘high value’ North American critical infrastructure, Cisco saysThe Record·Jan 15, 21:24 UTC · Jan 15, 2026Data breachCVE-2025-5369060
U.S. CISA adds Dassault Systèmes DELMIA Apriso flaw to its Known Exploited Vulnerabilities catalogSecurity Affairs·Sep 12, 05:58 UTC · Sep 12, 2025Exploit / PoC in the wildCVE-2025-5086CVE-2025-53690CVE-2025-38352+1 CVEs60
CISA orders federal agencies to patch Sitecore zeroThe Record·Sep 5, 13:37 UTC · Sep 5, 2025VulnerabilityCVE-2025-5369035
Sitecore zero-day vulnerability springs up from exposed machine keyCyberScoop·Sep 4, 17:34 UTC · Sep 4, 2025Exploit / PoC in the wildCVE-2025-5369060