Firetruck

CVE-2025-2746

KEV
Updated Feb 26, 2026 · PUBLISHED
View KEV entry →

Description

Kentico Xperience CMS contains an authentication bypass using an alternate path or channel vulnerability that could allow an attacker to control administrative objects.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
XperienceKentico / Xperience>= 0, <= 13.0.172affected