Security Digest
Sitecore: known exploited vulnerabilities
3 Sitecore CVEs CISA has confirmed as exploited in the wild since October 2023. If you run these products, check each one.
| Added | CVE | Product and flaw | CISA due |
|---|---|---|---|
| 2025-09-04 | CVE-2025-53690 | Sitecore Multiple Products Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability | 2025-09-25 |
| 2025-03-26 | CVE-2019-9875 | Sitecore CMS and Experience Platform (XP) Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability | 2025-04-16 |
| 2025-03-26 | CVE-2019-9874 | Sitecore CMS and Experience Platform (XP) Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability | 2025-04-16 |