← Back to browse · API

CVE-2025-53690

Severity
CRITICAL
CVSS
9.0
EPSS
0.31405
Risk score
71.99
CISA KEV
Yes
PoC
No
Published
2025-09-03
Modified
2026-02-26
First seen
2026-08-07
Aliases
EUVD-2025-26629, GHSA-G5R9-CGWV-WMPC
Products
Sitecore:Experience Manager (XM) 0 ≤9.0, Sitecore:Experience Platform (XP) 0 ≤9.0, Sitecore:Multiple Products
Sources
euvd EUVD-2025-26629
cisa.gov CVE-2025-53690

Description

Deserialization of Untrusted Data vulnerability in Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) allows Code Injection.This issue affects Experience Manager (XM): through 9.0; Experience Platform (XP): through 9.0.

References