CISA Alerts on Sitecore RCE Vulnerabilities; Next.js and DrayTek Devices Under Active Exploitation

TL;DR

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued warnings about critical vulnerabilities in Sitecore CMS and Experience Platform (XP), which are actively being exploited. Additionally, Next.js applications and DrayTek devices are facing active threats. Organizations are urged to apply patches immediately to mitigate risks.

CISA Warns of Critical Sitecore Vulnerabilities

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has recently added two significant security flaws impacting Sitecore CMS and Experience Platform (XP) to its Known Exploited Vulnerabilities (KEV) catalog. These vulnerabilities, which have been present for over six years, are now being actively exploited.

Vulnerabilities Overview

1. CVE-2019-9874 (CVSS score: 9.8)
   • A deserialization vulnerability in the Sitecore.Security.AntiCSRF

For comprehensive details, refer to the official source: CISA Flags Two Six-Year-Old Sitecore Vulnerabilities

Active Exploits Targeting Next.js and DrayTek Devices

In addition to the Sitecore vulnerabilities, active exploits have been detected against Next.js applications and DrayTek devices. Organizations using these technologies are advised to take immediate action to secure their systems.

Conclusion

The increasing frequency of cyber threats underscores the importance of proactive cybersecurity measures. Organizations must stay vigilant and apply necessary patches to protect against these emerging vulnerabilities. Regular updates and monitoring are essential to safeguard against potential cyber attacks.

References