Tag: kentico xperience

1 Attack Reports | 0 Vulnerabilities

Attack reports

Kentico Xperience Staging Service Authentication Bypass Vulnerabilities (CVE-2025-2746 & CVE-2025-2747)

Two critical security flaws, CVE-2025-2746 and CVE-2025-2747, have been discovered in Kentico Xperience 13, a digital experience platform. These vulnerabilities allow unauthenticated attackers to bypass the Staging Sync Server's authentication, potentially gaining administrative control over the CM…
remote code execution
authentication bypass
CVE-2025-2746
CVE-2025-2747
CVE-2025-2749
2025-03-26
kentico xperience
Published: March 26, 2025
Linked vulnerabilities : CVE-2025-2746 (CVSS 9.8), CVE-2025-2747 (CVSS 9.8), CVE-2025-2749 (CVSS 7.2)
Downloadable IOCs: 0
Click here to see more Attack Reports