Sitecore
In 6 briefs, most recently 17 January 2026. RSS for this tag
Learn more: Vulnerabilities (NVD) ↗
Known exploited (CISA KEV)
4 Sitecore vulnerabilities are on CISA's list of vulnerabilities exploited in the wild, 1 of them used in ransomware campaigns. Most recent:
- CVE-2025-53690 Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability
- CVE-2019-9875 Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability
- CVE-2019-9874 Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability
- CVE-2021-42237 Sitecore XP Remote Command Execution Vulnerability
Coverage in DanSec Daily
- CIRO data breach affects 750,000 people, Fortinet FortiSIEM flaw exploited in the wild, and Cisco AsyncOS zero-day patched.
- The Wealthsimple breach, the Salesforce-linked attack on Proofpoint and Tanium, SAP S/4HANA CVE-2025-42957 exploitation, and CastleRAT from TAG-150.
- PowerSchool sued by Texas over 62M-student breach; Sitecore zero-day exploited with WeepSteel malware; APT28 deploys NotDoor Outlook backdoor.
- The TransUnion breach affecting 4.4M US consumers, the Nevada ransomware attack, and a FreePBX zero-day under active exploitation.
- The TransUnion breach affecting 4.4 million people, a Nevada ransomware attack, and an actively exploited FreePBX zero-day.
- The Zoomcar breach affecting 8M+ users, Veeam's critical CVE-2025-23121 backup RCE, and the Langflow flaw exploited to deploy the Flodrix botnet.