CVE-2026-105046

Kentico Xperience 13 before 13.0.216 lacks object-level authorization checks for administration API endpoints.

Published Oct 2, 2026
CVSS 4.3 medium
0.2% chance of exploitation in the next 30 days (EPSS)
A fix is available

Affected software

Kentico Xperience

CVE-2026-105046 at the National Vulnerability Database