Kentico Xperience
4 known vulnerabilities in Kentico Xperience, 2 critical, 3 actively exploited, with patch priority, exploit likelihood and the news covering them.
Recently exploited
- CVE-2025-2749 CVSS 7.2 high · actively exploited Kentico Xperience Path Traversal Vulnerability
- CVE-2025-2747 CVSS 9.8 critical · actively exploited Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability
- CVE-2025-2746 CVSS 9.8 critical · actively exploited Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability
Latest vulnerabilities
- CVE-2026-105046 CVSS 4.3 medium Kentico Xperience 13 before 13.0.216 lacks object-level authorization checks for administration API endpoints.
- CVE-2025-2749 CVSS 7.2 high · actively exploited Kentico Xperience Path Traversal Vulnerability
- CVE-2025-2747 CVSS 9.8 critical · actively exploited Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability
- CVE-2025-2746 CVSS 9.8 critical · actively exploited Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability