References https://labs.watchtowr.com/is-b-for-backdoor-pre-auth-rce-chain-in-sitecore-experience-platform/ https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB1003667 https://nvd.nist.gov/vuln/detail/CVE-2025-34509 https://nvd.nist.gov/vuln/detail/CVE-2025-34510 https://app.opencve.io/cve/?vendor=sitecore https://bishopfox.com/blog/sitecore-experience-platform-vulnerabilities-critical-update-needed-for-versions-10-1-to-10-3 https://www.kaspersky.com/blog/vulnerabilities-sitecore-experience-platform/53683/ https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB1003734 https://labs.watchtowr.com/cache-me-if-you-can-sitecore-experience-platform-cache-poisoning-to-rce/ https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB1003865 https://avd.aliyun.com/detail?id=AVD-2025-53693 https://www.helpnetsecurity.com/2025/09/04/sitecore-zero-day-vulnerability-cve-2025-53690-exploited/ https://nvd.nist.gov/vuln/detail/CVE-2025-53690
Related Vulnerabilities旭辰資訊|SmartIT Desktop Manager - 存在4個漏洞中成科信票务管理系统 /SystemManager/TicketSystem/ReturnTicketPlance.ashx SQL 注入漏洞中成科信票务管理系统 /SystemManager/Planetarium/ReserveTicketManagerPlane.ashx SQL 注入漏洞Hepta Platforms|Heptabase - Stored Cross-Site ScriptingPoCCVE-2020-10204: Sonatype Nexus Repository Manager 3 - Remote Code ExecutionPoCccm-detect: Clear-Com Core Configuration Manager Panel - DetectPoCibm-websphere-ssrf: IBM WebSphere HCL Digital Experience - Server-Side Request Forgery智慧物联网综合服务平台ListFileManager存在目录枚举漏洞ServiceNow-AI-Platform /assessment_thanks.do 代码执行漏洞(CVE-2026-6875)PoCCVE-2026-6875: ServiceNow AI Platform - Pre-Auth JavaScript Sandbox Escape RCEXWiki Platform /xwiki/bin/skin/ 目录遍历漏洞(CVE-2026-34151)WP User Manager /profile/admin/about 文件包含漏洞(CVE-2026-9290)Progress WhatsUp Gold /NmConsole/Platform/PerformanceMonitorErrors/HasErrors SQL 注入漏洞(CVE-2024-6670)