The Hacker News·Jan 1, 2026 criticalRondoDox Botnet Exploits Critical React2Shell Flaw to Hijack IoT Devices and Web Servers#cve-2025-55182#cve-2023-1389#cve-2025-24893 2 min2
Recorded Future·Dec 9, 2025 criticalOctober 2025 CVE Landscape#cve-2025-59287#cve-2025-61882#cve-2025-41244 in the wild 10 min
Security Affairs·Nov 17, 2025 criticalRondoDox expands botnet by exploiting XWiki RCE bug left unpatched since February 2025#cve-2025-24893#vulnerability in the wild 3 min
The Hacker News·Nov 15, 2025 criticalRondoDox Exploits Unpatched XWiki Servers to Pull More Devices Into Its Botnet#cve-2025-24893#vulnerability in the wild 2 min
Security Affairs·Oct 30, 2025 criticalU.S. CISA adds XWiki Platform, and Broadcom VMware Aria Operations and VMware Tools flaws to its Known Exploited Vulnerabilities catalog#cve-2025-24893#cve-2025-41244#exploit in the wild 2 min
The Hacker News·Oct 30, 2025 criticalActive Exploits Hit Dassault and XWiki — CISA Confirms Critical Flaws Under Attack#cve-2025-6204#cve-2025-6205#cve-2025-24893 in the wild 3 min