[ Vendor · 5 CVEs ]
Kentico
CVEs affecting Kentico published in the last 30 days, plus any Kentico CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-105046 | 2 Oct 2026 | CVSS 4.3 | Kentico XperienceKentico Xperience 13 before 13.0.216 lacks object-level authorization checks for administration API endpoints. | |
| CVE-2025-2749 | 24 Mar 2025 | CVSS 7.2 | Kentico Xperience Path TraversalAn authenticated remote code execution in Kentico Xperience allows authenticated users Staging Sync Server to upload arbitrary data to path relative… | ExploitedFix |
| CVE-2025-2746 | 24 Mar 2025 | CVSS 9.8 | Kentico Xperience CMS Authentication Bypass Using an Alternate Path or ChannelAn authentication bypass vulnerability in Kentico Xperience allows authentication bypass via the Staging Sync Server password handling of empty SHA1… | ExploitedFix |
| CVE-2025-2747 | 24 Mar 2025 | CVSS 9.8 | Kentico Xperience CMS Authentication Bypass Using an Alternate Path or ChannelAn authentication bypass vulnerability in Kentico Xperience allows authentication bypass via the Staging Sync Server component password handling for… | ExploitedFix |
| CVE-2019-10068 | 26 Mar 2019 | CVSS 9.8 | Kentico Xperience Deserialization of Untrusted DataAn issue was discovered in Kentico 12.0.x before 12.0.15, 11.0.x before 11.0.48, 10.0.x before 10.0.52, and 9.x versions. Due to a failure to… | Exploited |