Thehackernews RondoDox Botnet Expands by Exploiting Unpatched XWiki RCE Vulnerability
Article Content
Browse articles 
The RondoDox botnet is exploiting the unpatched XWiki remote code execution vulnerability CVE-2025-24893, which has a CVSS score of 9.8. Despite patches released in February 2025, many servers remain vulnerable, allowing RondoDox to infect additional devices and expand its network. The attack targets unpatched XWiki servers, increasing the botnet's reach.
Ask AI about this cluster
Answers cite the sources they use
Updated 229d ago How this analysis works
More articles in this cluster (3)
Following this threat?
Track RondoDox and CVE-2025-24893 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
PHP Vulnerability Sparks Widespread Cybersecurity Concerns A critical PHP vulnerability has been disclosed, prompting warnings from cybersecurity experts about potential exploits. The PHP Foundation acknowledged a delay in addressing this flaw, which could leave numerous smaller websites vulnerable for weeks. Mitchell Amador, CEO of Immunefi, described the situation as a… 
Brotli Decoder Vulnerability Patched Across Multiple Linux Distributions A vulnerability, CVE-2026-111497, affecting the Brotli decoder has been patched in various Linux distributions, including Fedora 44 and Oracle Linux 10. The flaw allows for an out-of-bounds write, which could potentially enable attackers to execute arbitrary code. The vulnerability was published on October 22, 2026…