Sitecore XM/XP Insecure Deserialization (CVE-2025-27218)
Severity:
Critical
Summary
Due to the insecure BinaryFormatter deserialization vulnerability in Sitecore XM/XP, an unauthenticated attacker might send a specially-crafted serialized request to execute arbitrary code on the system.
Impact
Successful attacks of this vulnerability can result in takeover of Sitecore.
Remediation
Upgrade to the latest version of Sitecore
Required Skills for Successful Exploitation
Actions To Take
Classifications
Vulnerability Index
You can search and find all vulnerabilities
Select Category
Select Vulnerability
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Select Vulnerability
Related Vulnerabilities
Featured resources
Build your resistance to threats. And save hundreds of hours each month.
