PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Sitecore Experience Platform Vulnerabilities: Critical Update Needed for Versions 10.1 to 10.3

bishopfox.com | blog | #rce | #vulnerability | #hardcoded-credentials | #sitecore | #cve-2025-34509 | #cms-security
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Three chained Sitecore flaws — hardcoded ServicesAPI password ('b'), ZIP-slip traversal, upload bug in the PowerShell extension — enable remote code execution; versions 10.1-10.3 need urgent patching.
Published
Collected

Related coverage

vulnerability · wiz.io
[CVE-2026-111497] Broccoli2shell: Everything You Need To Know About The Critical Brotli Decoder Vulnerability
Detect and mitigate CVE-2026-111497, a critical Brotli decoder vulnerability enables remote code execution.
Critical · vulnerability · github.com
php2shell-zeros: Unpatched 0-Day RCE Flaws and Weaponized Exploit Chains in PHP and NativePHP
These surviving flaws bypass earlier patches and demonstrate that core PHP deserialization and memory management remain fundamentally fragile, posing critical unauthenticated RCE risks to WordPress and production PHP services.
vulnerability · bugpwn.com
open62541: Integer Overflow → Heap Overflow → RCE.
Original research: how a 16 bit size field overflow in open62541's custom DataType machinery lets a malicious OPC UA server corrupt a connecting client's heap, up to remote code execution. CVE-2026-116014, CVSS 9.2. Root cause, networked PoC, and the official fix. By BUG|PWN.
blog · bishopfox.com
Zilliz / Attu | 2.6.5
Bishop Fox disclosed two flaws in Zilliz Attu 2.6.5, the Milvus management UI. An unauthenticated SSRF combined with a regex validation bypass chains into Kubernetes namespace takeover, exposing entire clusters to attackers.
blog · aikido.dev
How to patch PHP2Shell with free Aikido Images
PHP2Shell is a pair of critical remote code execution (RCE) vulnerabilities in PHP, CVE-2026-109618 and CVE-2026-109619. Both score 9.2 on CVSS v4.0, and either one can let an unauthenticated attacker run code on a server that handles PHP requests. Cloudflare reports that exploitation has started.
blog · abdulmhsblog.com
20+ vulnerabilities found in satellite receiver used by US DoD, EU's Space Agency and others
20+ CVEs in the IDC SFX2100 satellite receiver used by the US DoD and ESA: command injection, SNMP RCE, hardcoded credentials and path traversal, disclosed after the vendor never responded.
Back