Zero-Day in Sitecore Exploited to Deploy WEEPSTEEL Malware

Hackers exploit a Sitecore zero-day (CVE-2025-53690) to deploy WEEPSTEEL Malware via ViewState attacks, enabling Remote Code Execution (RCE).

First seen on hackread.com

Jump to article: hackread.com/zero-day-sitecore-exploited-deploy-weepsteel-malware/