CVE-2025-24893
Known exploited · CISA KEV
CVSS 9.8 CRITICAL: xWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. EPSS 100% (100th percentile).
CISA federal remediation date Nov 20 · date passed
Vulnerabilities & Exploits · Cryptojacking
Google reports attackers increasingly exploit newly disclosed third‑party RCEs to gain access to cloud environments and deploy cryptominers.
4 sources · Mar 13
Known exploited · CISA KEV
CVSS 9.8 CRITICAL: xWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. EPSS 100% (100th percentile).
CISA federal remediation date Nov 20 · date passed
Known exploited · CISA KEV
CVSS 10 CRITICAL: a pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0… Known ransomware campaign use. EPSS 100% (100th percentile).
CISA federal remediation date Dec 12 · date passed
Dark Reading
Most Google Cloud Attacks Start With Bug Exploitation
Thanks to AI, the new top cause of cloud compromises is vulnerability exploits that beat patching cycles.
originalHelp Net Security
Software vulnerabilities push credential abuse aside in cloud intrusions - Help Net Security
Cyber threats in cloud environments are shifting toward software vulnerabilities, identity compromise and insider data theft.
originalInfosecurity Magazine
Cloud Attackers Now Prefer Vulnerability Exploits Over Credentials
Google Cloud report details a sharp rise in attackers exploiting software vulnerabilities, including React2Shell
originalPart of the PlainSec briefing for 2026-03-11
Every edition of this story: Attackers weaponize new RCEs to compromise cloud environments