Tag

#sitecore

1 post tagged #sitecore.

Analysis · May 20, 2026 · Colten Anderson

Sitecore CVE-2021-42237: another .NET deserialization RCE in a CMS you forgot was internet-facing

CVE-2021-42237 is an insecure-deserialization RCE in Sitecore XP. It's the same .NET deserialization footgun that keeps showing up in enterprise web apps, on a CMS that often sits forgotten but internet-facing.