EDB-52344

PoC

Sitecore 10.4 - Remote Code Execution (RCE)

view exploit source exploit_dbtype webappsauthor Yesith Alvarezpublished 2025-06-26catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2025-27218US—Exploit
Sitecore Experience Manager (XM) and Experience Platform (XP) 10.4 before KB1002844 allow remote code execution through insecure deserialization.
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan