Known Exploited Vulnerabilities October 20, 2025 · CISA KEV Catalog

CVE-2025-2746: Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability

Kentico Xperience CMS contains an authentication bypass using an alternate path or channel vulnerability that could allow an attacker to control administrative objects.

Read the original at CISA KEV Catalog ↗

Topics

Vulnerabilities & Patching

Mentions

CVE-2025-2746Kentico

Related

CVE-2025-2749: Kentico Xperience Path Traversal Vulnerability Known Exploited Vulnerabilities · Apr 20, 2026

CVE-2025-2747: Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability Known Exploited Vulnerabilities · Oct 20, 2025

CVE-2019-10068: Kentico Xperience Deserialization of Untrusted Data Vulnerability Known Exploited Vulnerabilities · Mar 25, 2022