Threat intelligence / Vulnerability
CVE-2025-53690
Sitecore Experience Manager (XM), Experience Platform (XP), Experience Commerce (XC), and Managed Cloud contain a deserialization of untrusted data vulnerability involving the use of default machine keys. This flaw allows attackers to exploit exposed ASP.NET machine keys to achieve remote code execution.
Vulnerability
TypeVulnerability
External ID—
First seen2025-09-04
Last seen2025-09-04
Confidence
—
Sitecore Experience Manager (XM), Experience Platform (XP), Experience Commerce (XC), and Managed Cloud contain a deserialization of untrusted data vulnerability involving the use of default machine keys. This flaw allows attackers to exploit exposed ASP.NET machine keys to achieve remote code execution.
Labels
CISA KEV context
Vendor / productSitecore Multiple Products
Added2025-09-04
Due date2025-09-25
2 recorded
Relationships
2 external