Critical RCE Vulnerability in Craft CMS Exploited to Deploy Cryptominers and Ransomware

A critical unauthenticated Remote Code Execution (RCE) vulnerability, CVE-2025-32432, in Craft CMS (versions 3.0.0-RC1 to 5.6.17) is being actively exploited by the Mimo threat group.