Skip to content
OpenAdvisories

Vendor

Kentico

38 known vulnerabilities.

Products

Xperience 34 CMS 1 Kentico CMS 1 Kentico Xperience 1 Kentico Xperience XMS 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2025-2749 Exploited

    Kentico Xperience <= 13.0.178 Staging Media File Upload Authenticated RCE

    An authenticated remote code execution in Kentico Xperience allows authenticated users Staging Sync Server to upload arbitrary data to path relative locations. This results in path traversal and arbitrary file upload, including content that can be executed se…

    Kentico Xperience
    KEV Apr 20, 2026