Back Thehackernews

Critical XXE Bug CVE-2025-66516 (CVSS 10.0) Hits Apache Tika, Requires Urgent Patch

Thehackernews • December 5, 2025

Cloud threats are getting smarter—and harder to see. Join our experts to learn how code-to-cloud detection reveals hidden risks across identities, AI, and Kubernetes, helping you stop attacks before they reach production.

Community patching is fast, flexible, and easy to get wrong. This session shows how to build guardrails, spot repo risks early, and balance speed with security using proven, field-tested methods.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Apache Tika Faces Critical XXE Vulnerability CVE-2025-66516 A critical vulnerability, CVE-2025-66516, has been identified in Apache Tika, allowing for XML external entity (XXE) injection attacks. This vulnerability poses significant risks to users of Apache Tika, necessitating urgent patching to mitigate potential exploits. 10 sources 62

Extracted Entities

Critical XXE Bug CVE-2025-66516 (CVSS 10.0) Hits Apache Tika, Requires Urgent Patch

The full story

Extracted Entities

CVEs (1)

Platforms (1)

Vulnerabilities (1)