Critical Insecure Deserialization Vulnerability in Sitecore XM/XP

CVE-2025-27218 is a critical security vulnerability identified in Sitecore Experience Manager (XM) and Experience Platform (XP) versions 10.4 and earlier. The vulnerability arises from an insecure deserialization flaw that allows an unauthenticated remote attacker to execute arbitrary code on the affected system. This could lead to full system compromise, data exfiltration, or further network penetration. With a public proof-of-concept (PoC) exploit now available, organizations are strongly urged to apply the official patch immediately.