Security News CISA Orders Immediate Patch of Critical Sitecore Vulnerability Under Active Exploitation TheHackerNews Daniel Bender Sep 5, 2025 CVE-2025-53690, a critical Sitecore flaw (CVSS 9.0), exploited since Dec 2024, enables RCE and data theft.