September 2025 CVE LandscapeRecorded Future·Oct 17, 00:00 UTC · Oct 17, 2025Exploit / PoC in the wildCVE-2025-53690CVE-2021-21311CVE-2025-20333+6 CVEs60
CISA Orders Immediate Patch of Critical Sitecore Vulnerability Under Active ExploitationThe Hacker News·Sep 8, 14:09 UTC · Sep 8, 2025Vulnerability in the wildCVE-2025-53690CVE-2025-30406CVE-2025-393560
⚡ Weekly Recap: Drift Breach Chaos, Zero-Days Active, Patch Warnings, Smarter Threats & MoreThe Hacker News·Dec 6, 11:14 UTC · Dec 6, 2025Vulnerability in the wildCVE-2025-53690CVE-2025-38352CVE-2025-48543+25 CVEs160
U.S. CISA adds Sitecore, Android, and Linux flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs·Sep 25, 18:23 UTC · Sep 25, 2025Exploit / PoC in the wildCVE-2025-38352CVE-2025-48543CVE-2025-5369060
Week in review: Several companies affected by the Salesloft Drift breach, Sitecore 0-day vulnerabilityHelp Net Security·Sep 7, 00:00 UTC · Sep 7, 2025Vulnerability in the wildCVE-2025-53690CVE-2025-24204CVE-2025-48543+2 CVEs60
U.S. CISA adds Dassault Systèmes DELMIA Apriso flaw to its Known Exploited Vulnerabilities catalogSecurity Affairs·Sep 12, 05:58 UTC · Sep 12, 2025Exploit / PoC in the wildCVE-2025-5086CVE-2025-53690CVE-2025-38352+1 CVEs60
Sitecore zero-day vulnerability springs up from exposed machine keyCyberScoop·Sep 4, 17:34 UTC · Sep 4, 2025Exploit / PoC in the wildCVE-2025-5369060