CVE-2025-53837: Remote Code Execution in XWiki Rendering via Macro Escape Injection
Vulnerability ID: CVE-2025-53837
CVSS Score: 9.9
Published: 2026-09-18
CVE-2025-53837 is a critical remote code execution (RCE) vulnerability in XWiki Rendering before versions 14.10.2 and 15.0 RC1. The vulnerability arises from a failure to escape macro closing tags within raw output handled by HTML macro blocks. This allows low-privilege users to escape the restricted HTML container and execute high-privilege scripts under the application's context.
TL;DR
Unauthenticated or low-privilege users can inject the "{{/html}}" sequence to escape HTML macro scopes and run arbitrary code on the host OS via privileged script macros.
Technical Details
- Improproper Input Validation: An issue was discovered in NETGEAR R6080 routers through 1.0.0.46. The login.cgi and upgrade.cgi pages and multiple dynamic parameters (such as formUsername, hidden_sysPassword, sysPassword, save_reboot, and select_country) are vulnerable to buffer overflow. An attacker can hijack a stack variable and crash the system or execute arbitrary code with admin privileges by writing over boundary limits of variables.
Affected Systems
- cpe:2.3⭕netgear:r6080_firmware::::::::
Mitigation Strategies
Read the full report for CVE-2025-53837 on our website for more details including interactive diagrams and full exploit analysis.
Top comments (0)