XWiki Vulnerability Targeted by Multiple Threat Actors

A vulnerability in XWiki software is being actively exploited by various threat actors, including botnets and coin-miners. VulnCheck reported on November 14, 2025, that these actors are utilizing a range of tools, from custom scanners to bespoke malware, to target the flaw. The XWiki platform is an open-source, Java-based wiki system used for knowledge and collaborative applications within organizations.