VulnerabilityBleeping Computer
9.8 — CRITICAL
Australia warns of global campaign targeting vulnerable CMS platforms
The Australian Cyber Security Centre (ACSC) issued an alert about a global exploitation campaign targeting vulnerable content management systems (CMS) and plugins. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
A global campaign is targeting vulnerable content management systems (CMS) and plugins, with many small- to medium-sized Australian businesses impacted, allowing threat actors to deploy webshells and disrupt services.
⚙️Technical Details
Affected Systems
WordPressCraft CMSMaxSite CMSMetInfo CMSJoomla JCE
Attack Vectors
NETWORKLOW
💥Impact Assessment
Severity: CRITICAL
Who Is at Risk
Small- to medium-sized Australian businesses
🛡️Recommended Actions
1Apply the latest security updates for CMS, themes, and plugins
2Remove unused components
3Enable automatic updates where possible
📦Affected Products
{'product_name': 'WordPress', 'cve_ids': ['CVE-2025-34085', 'CVE-2020-36847', 'CVE-2025-12057', 'CVE-2025-7443', 'CVE-2025-7852', 'CVE-2026-0740', 'CVE-2026-1969', 'CVE-2026-3844', 'CVE-2026-31843', 'CVE-2025-13486', 'CVE-2025-6389', 'CVE-2026-1357', 'CVE-2025-12352', 'CVE-2024-9234', 'CVE-2025-32432', 'CVE-2026-3395', 'CVE-2026-29014', 'CVE-2026-48907']}{'product_name': 'Craft CMS', 'cve_ids': ['CVE-2025-32432']}{'product_name': 'MaxSite CMS', 'cve_ids': ['CVE-2026-3395']}{'product_name': 'MetInfo CMS', 'cve_ids': ['CVE-2026-29014']}{'product_name': 'Joomla JCE', 'cve_ids': ['CVE-2026-48907']}
🔐NVD Verified DataVERIFIED
CVE-2025-7852 ↗CVSS 9.8 — CRITICAL
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HWeaknesses
CWE-434
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.