CVE-2025-24893Vulnerability
XWiki Platform Eval Injection Vulnerability
Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .
Reported by 1 independent source · first reported by The Hacker News · last reported
Last reported 2 days ago
CISA KEVAdded 30 Oct 2025
Fix due 20 Nov 2025
Used by ransomware: not knownCISA KEV catalogue
Fix due 20 Nov 2025
Used by ransomware: not knownCISA KEV catalogue
EPSS99.9%
higher than 99% of CVEsFIRST EPSS, as of 23 Oct 2026
higher than 99% of CVEsFIRST EPSS, as of 23 Oct 2026
What the reports say
1 report, newest first · the exact sentence from each-
ThreatsDay: AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 More“In a follow-up alert, VulnCheck said it observed attempts against five vulnerabilities -- PHPUnit (CVE-2017-9841), XWiki (CVE-2025-24893), Apache HTTP Server (CVE-2021-41773), PHP-CGI (CVE-2024-4577), and ThinkPHP (CVE-2022-47945) -- from 119.13.79.145 (Hong Kong), 211.20.144.116…”
Indicators reported together
named in the same reports- 119.13.79[.]145in 1 report
- 210.242.76[.]32in 1 report
- 211.20.144[.]116in 1 report
- blueskyweb[.]xyzin 1 report
- riskified-okta[.]comin 1 report
- shipmonk-servicenow[.]comin 1 report
Copy these 6 indicators · defanged
Also named with it: CVE-2024-4577, CVE-2024-40766, CVE-2023-27532, CVE-2022-47945, CVE-2020-3259, CVE-2021-41773, CVE-2026-107186, CVE-2026-107187, CVE-2026-107188, CVE-2023-20269, CVE-2024-40711, CVE-2026-113380, CVE-2026-65162, CVE-2026-114509
Thanks — we review every report.