CVE-2025-24893
Known exploited · CISA KEV
CVSS 9.8 CRITICAL: xWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. EPSS 100% (100th percentile).
CISA federal remediation date Nov 20 · date passed
Vulnerabilities & Exploits · Cryptojacking
Google Cloud reports attackers increasingly exploit unpatched third‑party software to gain initial access to user‑managed cloud services. Software‑based entry caused 44.5% of investigated initial accesses in H2 2025, surpassing credential abuse at 27.2%; React2Shell (CVE‑2025‑55182) was frequently exploited.
4 sources · Mar 13
Known exploited · CISA KEV
CVSS 9.8 CRITICAL: xWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. EPSS 100% (100th percentile).
CISA federal remediation date Nov 20 · date passed
Known exploited · CISA KEV
CVSS 10 CRITICAL: a pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0… Known ransomware campaign use. EPSS 100% (100th percentile).
CISA federal remediation date Dec 12 · date passed
Dark Reading
Most Google Cloud Attacks Start With Bug Exploitation
Thanks to AI, the new top cause of cloud compromises is vulnerability exploits that beat patching cycles.
originalHelp Net Security
Software vulnerabilities push credential abuse aside in cloud intrusions - Help Net Security
Cyber threats in cloud environments are shifting toward software vulnerabilities, identity compromise and insider data theft.
originalInfosecurity Magazine
Cloud Attackers Now Prefer Vulnerability Exploits Over Credentials
Google Cloud report details a sharp rise in attackers exploiting software vulnerabilities, including React2Shell
originalPart of the PlainSec briefing for 2026-03-14
Every edition of this story: Attackers shift to RCE bugs to compromise clouds