# Regulatory updates

### Sitecore - "High" Impact Vulnerability

June 18, 2025

Sitecore, a major enterprise CMS, had **a built-in user account with an ultra-weak password** ("b") that could let attackers in through a side-door login. When paired with two other flaws, it potentially allowed **full control of affected servers**. Security experts urge **immediate patching** to avoid exploitation.

[Read more here](https://www.msn.com/en-us/news/technology/one-of-the-world-s-most-popular-cms-tools-has-an-embarrassing-security-flaw-so-patch-immediately/ar-AA1GY1xX?ocid=winp2fptaskbarhover&cvid=056987ac1c024c47dede58b58281dea1&ei=10)

#### Categories

- [All Posts](/content/regulatory-updates/index.html)
- [Breach](/content/regulatory-updates?blogcategory=Breach/index.html)
- [CMMC](/content/regulatory-updates?blogcategory=CMMC/index.html)
- [CMS](/content/regulatory-updates?blogcategory=CMS/index.html)
- [Third-party](/content/regulatory-updates?blogcategory=Third-party/index.html)
- [Vulnerability](/content/regulatory-updates?blogcategory=Vulnerability/index.html)