Skip to content
OpenAdvisories

Vendor

Kentico

38 known vulnerabilities.

Products

Xperience 34 CMS 1 Kentico CMS 1 Kentico Xperience 1 Kentico Xperience XMS 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.2
    CVE-2025-2749 Exploited

    Kentico Xperience <= 13.0.178 Staging Media File Upload Authenticated RCE

    An authenticated remote code execution in Kentico Xperience allows authenticated users Staging Sync Server to upload arbitrary data to path relative locations. This results in path traversal and arbitrary file upload, including content that can be executed se…

    Kentico Xperience
    KEV Apr 20, 2026
  • Critical 9.8
    CVE-2025-2747 Exploited Scanner template EPSS 97%

    Kentico Xperience <= 13.0.178 Staging Sync Server None Password Type Authentication Bypass

    An authentication bypass vulnerability in Kentico Xperience allows authentication bypass via the Staging Sync Server component password handling for the server defined None type. Authentication bypass allows an attacker to control administrative objects.This …

    Kentico Xperience
    KEV Oct 20, 2025
  • Critical 9.8
    CVE-2025-2746 Exploited Scanner template EPSS 74%

    Kentico Xperience <= 13.0.172 Staging Sync Server Digest Password Authentication Bypass

    An authentication bypass vulnerability in Kentico Xperience allows authentication bypass via the Staging Sync Server password handling of empty SHA1 usernames in digest authentication. Authentication bypass allows an attacker to control administrative objects…

    Kentico Xperience
    KEV Oct 20, 2025