The Hacker News·Jun 19, 2025 highHard-Coded 'b' Password in Sitecore XP Sparks Major RCE Risk in Enterprise Deployments#cve-2025-34509#cve-2025-34510#cve-2025-34511 in the wild 4 min
The Hacker News·Mar 29, 2025 highCISA Warns of Sitecore RCE Flaws; Active Exploits Hit Next.js and DrayTek Devices#cve-2019-9874#cve-2019-9875#cve-2020-8515 in the wild 3 min
Security Affairs·Mar 27, 2025 highU.S. CISA adds Sitecore CMS and XP, and GitHub Action flaws to its Known Exploited Vulnerabilities catalog#cve-2019-9875#cve-2019-9874#cve-2025-30154 in the wild 2 min