Groovy

XWiki SolrSearch Macro Unauthenticated Groovy RCE (CVE-2025-24893) new KEV EPSS 100%CVE-2025-24893webCRITICAL 9.8Patched2026-07-06Oracle Identity Manager `;.wadl` Authentication Bypass + Groovy Script RCE (CVE-2025-61757) new KEV EPSS 88%CVE-2025-61757webCRITICAL 9.8Unpatched2026-07-06XWiki Unauthenticated XAR Import Leading to RCE — CVE-2026-33137 newCVE-2026-33137webCRITICAL 9.3Patched2026-07-05Apache NiFi 2.8.0 — EXECUTE_CODE Permission Bypass to Groovy RCE (CVE-2026-39816) newCVE-2026-39816webCRITICALPatched2026-07-05