CISA Orders Immediate Patch of Critical Sitecore Vulnerability Under Active Exploitation

🗓️ 05 Sep 2025 16:08:00Reported by The Hacker NewsType

CISA orders FCEB agencies to patch Sitecore CVE 2025 53690, a critical 9.0 code execution flaw under active exploitation.

Reporter	Title	Published	Views	Family All 26
GithubExploit	Exploit for Deserialization of Untrusted Data in Sitecore Experience_Commerce	5 Nov 202506:50	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Sitecore Experience_Commerce	4 Sep 202519:53	–	githubexploit
BDU FSTEC	The vulnerability of the Sitecore Experience Manager (XM), Experience Platform (XP), and the Experience Commerce (XC) platform for personalized purchasing processes is related to deficiencies in the deserialization mechanism. This allows attackers to execute arbitrary code and gain unauthorized access to protected information.	26 Jan 202600:00	–	bdu_fstec
Circl	CVE-2025-53690	3 Sep 202519:30	–	circl
CISA KEV Catalog	Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability	4 Sep 202500:00	–	cisa_kev
CISA	CISA Adds Three Known Exploited Vulnerabilities to Catalog	4 Sep 202512:00	–	cisa
CNNVD	Sitecore Experience Manager 安全漏洞	3 Sep 202500:00	–	cnnvd
CVE	CVE-2025-53690	3 Sep 202520:04	–	cve
Cvelist	CVE-2025-53690 Sitecore Products ViewState Deserialization Vulnerability	3 Sep 202520:04	–	cvelist
EUVD	EUVD-2025-26629	3 Sep 202520:04	–	euvd

08 Sep 2025 14:09Current

9.8High risk

Vulners AI Score9.8

CVSS 3.19

EPSS0.51094

SSVC