---
title: "Sitecore: known exploited vulnerabilities"
url: https://erroneo.us/security/vendor/sitecore/
description: "Every Sitecore vulnerability in CISA's Known Exploited Vulnerabilities catalog since October 2023 (3), newest first, with due dates and fixes."
type: vendor
section: "Security Digest"
date_modified: 2025-09-04
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Sitecore: known exploited vulnerabilities

- 2025-09-04 [CVE-2025-53690](https://erroneo.us/security/cve/CVE-2025-53690/index.md) Sitecore Multiple Products: Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability (due 2025-09-25; ransomware: Unknown)
- 2025-03-26 [CVE-2019-9875](https://erroneo.us/security/cve/CVE-2019-9875/index.md) Sitecore CMS and Experience Platform (XP): Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability (due 2025-04-16; ransomware: Unknown)
- 2025-03-26 [CVE-2019-9874](https://erroneo.us/security/cve/CVE-2019-9874/index.md) Sitecore CMS and Experience Platform (XP): Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability (due 2025-04-16; ransomware: Unknown)

---
Source page: https://erroneo.us/security/vendor/sitecore/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt