+- Hack Forums (https://hackforums.net)
+-- Forum: General Topics (https://hackforums.net/forumdisplay.php?fid=7)
+--- Forum: World (https://hackforums.net/forumdisplay.php?fid=445)
+---- Forum: News and Happenings (https://hackforums.net/forumdisplay.php?fid=89)
+---- Thread: RondoDox Exploits Unpatched XWiki Servers to Pull More Devices Into Its Botnet (/showthread.php?tid=6314471)
RondoDox Exploits Unpatched XWiki Servers to Pull More Devices Into Its Botnet - Stanley - Nov 25, 2025
RondoDox Exploits Unpatched XWiki Servers to Pull More Devices Into Its Botnet
The botnet malware known as RondoDox has been observed targeting unpatched XWiki instances against a critical security flaw that could allow attackers to achieve arbitrary code execution.
The vulnerability in question is CVE-2025-24893 (CVSS score: 9.8), an eval injection bug that could allow any guest user to perform arbitrary remote code execution through a request to the "/bin/get/Main/
https://thehackernews.com/2025/11/rondodox-exploits-unpatched-xwiki.html