https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 10:09:26 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-00300 bdu:2026-00300 https://cve.radiocsirt.org/vuln/bdu:2026-00300 https://cve.radiocsirt.org/vuln/euvd-2026-272645 EUVD-2026-272645 https://cve.radiocsirt.org/vuln/euvd-2026-272645 https://cve.radiocsirt.org/vuln/fkie_cve-2025-34509 <p>Sitecore Experience Manager (XM) and Experience Platform (XP) versions 10.1 to 10.1.4 rev. 011974 PRE, all versions of 10.2, 10.3 to 10.3.3 rev. 011967 PRE, and 10.4 to 10.4.1 rev. 011941 PRE contain a hardcoded user account. Unauthenticated and remote attackers can use this account to access administrative API over HTTP.</p> <p>Sitecore Experience Manager (XM) and Experience Platform (XP) versions 10.1 to 10.1.4 rev. 011974 PRE, all versions of 10.2, 10.3 to 10.3.3 rev. 011967 PRE, and 10.4 to 10.4.1 rev. 011941 PRE contain a hardcoded user account. Unauthenticated and remote attackers can use this account to access administrative API over HTTP.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-34509 https://cve.radiocsirt.org/vuln/ghsa-g93f-92gj-4q4x <p>Sitecore Experience Manager (XM) and Experience Platform (XP) versions 10.1 to 10.1.4 rev. 011974 PRE, all versions of 10.2, 10.3 to 10.3.3 rev. 011967 PRE, and 10.4 to 10.4.1 rev. 011941 PRE contain a hardcoded user account. Unauthenticated and remote attackers can use this account to access administrative API over HTTP.</p> <p>Sitecore Experience Manager (XM) and Experience Platform (XP) versions 10.1 to 10.1.4 rev. 011974 PRE, all versions of 10.2, 10.3 to 10.3.3 rev. 011967 PRE, and 10.4 to 10.4.1 rev. 011941 PRE contain a hardcoded user account. Unauthenticated and remote attackers can use this account to access administrative API over HTTP.</p> https://cve.radiocsirt.org/vuln/ghsa-g93f-92gj-4q4x https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1345 <p>Ein entfernter Angreifer kann mehrere Schwachstellen in Sitecore Experience Manager ausnutzen, um Sicherheitsvorkehrungen zu umgehen, oder um beliebigen Programmcode auszuführen.</p> <p>Ein entfernter Angreifer kann mehrere Schwachstellen in Sitecore Experience Manager ausnutzen, um Sicherheitsvorkehrungen zu umgehen, oder um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1345