Tag: ViewState deserialization

ViewState Deserialization Zero-Day in Sitecore Products — CVE-2025-53690

TL;DR Mandiant discovered an active ViewState deserialization attack against Sitecore instances that relied on a sample ASP.NET machine key published…