Security Digest

Kentico: known exploited vulnerabilities

3 Kentico CVEs CISA has confirmed as exploited in the wild since October 2023. If you run these products, check each one.

AddedCVEProduct and flawCISA due
2026-04-20CVE-2025-2749Kentico Kentico Xperience
Kentico Xperience Path Traversal Vulnerability
2026-05-04
2025-10-20CVE-2025-2747Kentico Xperience CMS
Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability
2025-11-10
2025-10-20CVE-2025-2746Kentico Xperience CMS
Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability
2025-11-10