Vulnerability in N/a

CVE-2025-27218

Sitecore Experience Manager (XM) and Experience Platform (XP) 10.4 before KB1002844 allow remote code execution through insecure deserialization.

EPSS: 0.757 (98.9th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

Public proof-of-concept exploits

References

support.sitecore.com/kb

Frequently asked questions

What is CVE-2025-27218?: CVE-2025-27218 is a vulnerability in N/a. Published 2025-02-20.
Is CVE-2025-27218 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.