{
  "site": "https://pwn.watch",
  "generatedAt": "2026-10-22T19:58:23.236Z",
  "tag": {
    "id": "sitecore",
    "label": "Sitecore",
    "isStack": false,
    "url": "https://pwn.watch/t/sitecore",
    "feed": "https://pwn.watch/t/sitecore/feed.xml"
  },
  "counts": {
    "incidents": 2,
    "live": 0,
    "notFullyPatched": 0,
    "patched": 2
  },
  "incidents": [
    {
      "slug": "sitecore-multiple-products-cve-2025-53690",
      "title": "Sitecore Multiple Products: Multiple Products Deserialization of Untrusted Data Vulnerability",
      "url": "https://pwn.watch/i/sitecore-multiple-products-cve-2025-53690",
      "json": "https://pwn.watch/i/sitecore-multiple-products-cve-2025-53690.json",
      "status": "closed",
      "severity": "critical",
      "patchStatus": "patched",
      "product": "Sitecore Multiple Products",
      "tags": [
        "sitecore",
        "cisa-kev",
        "rce"
      ],
      "cveIds": [
        "CVE-2025-53690"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2025-09-04",
      "closedAt": "2025-09-04",
      "updatedAt": "2025-09-04",
      "summary": "Sitecore Experience Manager (XM), Experience Platform (XP), Experience Commerce (XC), and Managed Cloud contain a deserialization of untrusted data vulnerability involving the use of default machine keys. This flaw allows attackers to exploit exposed ASP.NET machine keys to achieve remote code execution. Added to CISA KEV on 2025-09-04.",
      "xPost": null
    },
    {
      "slug": "sitecore-cms-and-experience-platform-xp-cve-2019-9874",
      "title": "Sitecore CMS and Experience Platform (XP): 2 exploited vulnerabilities (CVE-2019-9874, CVE-2019-9875)",
      "url": "https://pwn.watch/i/sitecore-cms-and-experience-platform-xp-cve-2019-9874",
      "json": "https://pwn.watch/i/sitecore-cms-and-experience-platform-xp-cve-2019-9874.json",
      "status": "closed",
      "severity": "critical",
      "patchStatus": "patched",
      "product": "Sitecore CMS and Experience Platform (XP)",
      "tags": [
        "sitecore",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2019-9874",
        "CVE-2019-9875"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2025-03-26",
      "closedAt": "2025-03-26",
      "updatedAt": "2025-03-26",
      "summary": "CVE-2019-9874: Sitecore CMS and Experience Platform (XP) contain a deserialization vulnerability in the Sitecore.Security.AntiCSRF module that allows an unauthenticated attacker to execute arbitrary code by sending a serialized .NET object in the HTTP POST parameter __CSRFTOKEN. CVE-2019-9875: Sitecore CMS and Experience Platform (XP) contain a deserialization vulnerability in the Sitecore.Security.AntiCSRF module that allows an authenticated attacker to execute arbitrary code by sending a serialized .NET object in the HTTP POST parameter __CSRFTOKEN. Added to CISA KEV on 2025-03-26.",
      "xPost": null
    }
  ],
  "posts": [],
  "changes": [
    {
      "incident": "sitecore-multiple-products-cve-2025-53690",
      "incidentTitle": "Sitecore Multiple Products: Multiple Products Deserialization of Untrusted Data Vulnerability",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-09-04",
      "title": "CISA added CVE-2025-53690 to the KEV catalog (due 2025-09-25).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/sitecore-multiple-products-cve-2025-53690"
    },
    {
      "incident": "sitecore-cms-and-experience-platform-xp-cve-2019-9874",
      "incidentTitle": "Sitecore CMS and Experience Platform (XP): 2 exploited vulnerabilities (CVE-2019-9874, CVE-2019-9875)",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-03-26",
      "title": "CISA added CVE-2019-9874 to the KEV catalog (due 2025-04-16).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/sitecore-cms-and-experience-platform-xp-cve-2019-9874"
    },
    {
      "incident": "sitecore-cms-and-experience-platform-xp-cve-2019-9874",
      "incidentTitle": "Sitecore CMS and Experience Platform (XP): 2 exploited vulnerabilities (CVE-2019-9874, CVE-2019-9875)",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-03-26",
      "title": "CISA added CVE-2019-9875 to the KEV catalog (due 2025-04-16).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/sitecore-cms-and-experience-platform-xp-cve-2019-9874"
    }
  ]
}