Actively exploited vulnerabilities affecting Sitecore products.https://wildfortech.comhttps://wildfortech.com/security#CVE-2025-53690https://wildfortech.com/security#CVE-2025-53690Sitecore's XM, XP, XC, and Managed Cloud products ship with default ASP.NET machine keys that attackers can exploit to deserialize malicious data. Because machine keys are used to validate and decrypt data like view state and cookies, knowing these keys lets an unauthenticated attacker craft payloads the server will blindly process, resulting in remote code execution. Any internet-exposed Sitecore instance using default keys is effectively wide open to full server compromise.Thu, 04 Sep 2025 00:00:00 GMTSitecoreMultiple Products