RondoDox Exploits Unpatched XWiki Servers to Pull More Devices Into Its Botnet

Back Thehackernews

RondoDox Exploits Unpatched XWiki Servers to Pull More Devices Into Its Botnet

Thehackernews •[email protected] (The Hacker News) • November 15, 2025

Share: View original

Your patch pipeline shouldn't be a gamble — build the guardrails that keep speed from becoming risk.

Learn how to protect cloud workloads, control access, and meet compliance requirements — without slowing innovation.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

RondoDox Botnet Expands by Exploiting Unpatched XWiki RCE Vulnerability The RondoDox botnet is exploiting the unpatched XWiki remote code execution vulnerability CVE-2025-24893, which has a CVSS score of 9.8. Despite patches released in February 2025, many servers remain vulnerable, allowing RondoDox to infect additional devices and expand its network. The attack targets unpatched XWiki servers, increasing the botnet's reach. 3 sources 70

Extracted Entities

Attack Types (1)

Platforms (1)