XWiki
In 4 briefs, most recently 18 November 2025. RSS for this tag
Learn more: Vulnerabilities (NVD) ↗
Known exploited (CISA KEV)
1 XWiki vulnerability is on CISA's list of vulnerabilities exploited in the wild. Most recent:
- CVE-2025-24893 XWiki Platform Eval Injection Vulnerability
Coverage in DanSec Daily
- The Oracle E-Business Suite-linked Cl0p breaches including Logitech, Chrome and FortiWeb zero-days, and the record 15.72 Tbps Aisuru DDoS attack on Microsoft …
- JLR's £196M cyberattack losses, RondoDox botnet exploiting unpatched XWiki flaw, and guilty pleas over North Korean IT worker infiltration.
- Balancer DeFi $120M hack, Everest ransomware claims, and XWiki RCE exploitation.
- Dentsu/Merkle breach, Canadian water and energy hacktivist intrusions, and DELMIA Apriso and XWiki exploitation, plus TEE.fail and PhantomRaven.