{"uuid": "e766b53b-ee93-40a0-ba5a-92f47cd72529", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-24893", "type": "exploited", "source": "https://t.me/pphm_HackerNews/1135", "content": "Botnet Surge Linked to Unpatched Wiki Platform Flaw\n\nA rapidly growing botnet campaign, known as RondoDox, has begun targeting servers running XWiki using a critical remote-code-execution vulnerability (CVE-2025-24893) that remained unpatched since February 2025. Exploitation of this flaw has allowed attackers to embed malicious scripts and integrate affected hosts into expansive botnet networks, underscoring how delayed patching can significantly amplify risk.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-23T00:00:25.489847Z"}