Regulatory updates
Sitecore - "High" Impact Vulnerability
June 18, 2025
Sitecore, a major enterprise CMS, had a built-in user account with an ultra-weak password ("b") that could let attackers in through a side-door login. When paired with two other flaws, it potentially allowed full control of affected servers. Security experts urge immediate patching to avoid exploitation.