ZeusQA
Start free

Known exploited vulnerabilities

XWiki vulnerabilities attackers have used

Every XWiki vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.

The short answer

CISA lists 1 XWiki vulnerability as exploited in the wild, 0 of them added in the last 12 months. The most recent is CVE-2025-24893, added Oct 30, 2025. Platform has the most entries (1).

In KEV, all time
1
Added, last 12 months
0
Used in ransomware
0
New CVEs this week
0

Every XWiki entry in CISA KEV

  1. CVE-2025-24893

    Added · due

    XWiki Platform Eval Injection Vulnerability

    XWiki Platform contains an eval injection vulnerability that could allow any guest to perform arbitrary remote code execution through a request to SolrSearch.

Related

Know the day a CVE lands in your code

Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.

Start freeSee how a run works