---
title: "Kentico: known exploited vulnerabilities"
url: https://erroneo.us/security/vendor/kentico/
description: "Every Kentico vulnerability in CISA's Known Exploited Vulnerabilities catalog since October 2023 (3), newest first, with due dates and fixes."
type: vendor
section: "Security Digest"
date_modified: 2026-04-20
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Kentico: known exploited vulnerabilities

- 2026-04-20 [CVE-2025-2749](https://erroneo.us/security/cve/CVE-2025-2749/index.md) Kentico Kentico Xperience: Kentico Xperience Path Traversal Vulnerability (due 2026-05-04; ransomware: Unknown)
- 2025-10-20 [CVE-2025-2747](https://erroneo.us/security/cve/CVE-2025-2747/index.md) Kentico Xperience CMS: Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability (due 2025-11-10; ransomware: Unknown)
- 2025-10-20 [CVE-2025-2746](https://erroneo.us/security/cve/CVE-2025-2746/index.md) Kentico Xperience CMS: Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability (due 2025-11-10; ransomware: Unknown)

---
Source page: https://erroneo.us/security/vendor/kentico/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt