Deserialization Vulnerability in Sitecore Experience Manager and Experience Platform

CVE-2025-53690

What is CVE-2025-53690?

A deserialization vulnerability in Sitecore Experience Manager (XM) and Sitecore Experience Platform (XP) could allow attackers to exploit untrusted data, potentially leading to unauthorized code execution. Applications using affected versions are at risk, making it essential for users to ensure they are on updated releases and to implement appropriate security measures.

References