Skip to content
Sitecore Experience Platform Vulnerabilities: Critical Update Needed for Versions 10.1 to 10.3
bishopfox.com | blog | #rce | #vulnerability | #hardcoded-credentials | #sitecore | #cve-2025-34509 | #cms-security
Summary
Three chained Sitecore flaws — hardcoded ServicesAPI password ('b'), ZIP-slip traversal, upload bug in the PowerShell extension — enable remote code execution; versions 10.1-10.3 need urgent patching.
- Published
- Collected