Back to the CVE list

CVE-2025-2746 CISA KEV · Actively exploited

Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability

CVSS score

—

EPSS probability

%74.1

Risk score

—

Published

1 y ago

Overview Public Exploits (1)Newsroom Vulnerability Timeline

Related Security News

Articles and analysis bulletins in which the press and security publications have covered this vulnerability:

No verified news item has been matched to this CVE yet.

Similar Vulnerabilities

8.6

CVE-2020-36890Kentico Xperience <= 10 Administrator Access Control Bypass

VendorKentico ProductXperience

Patch verifiedEPSS %010 mo ago

5.4

CVE-2025-5591Cross-site scripting in Kentico Xperience

VendorKentico ProductXperience

Patch status unknownEPSS %09 mo ago

4.3

CVE-2026-105046Vulnerability in Kentico Xperience

VendorKentico ProductXperience

Patch verifiedEPSS %016 d ago

-

CVE-2025-2749 Actively exploitedKentico Xperience Path Traversal Vulnerability

VendorKentico ProductKentico Xperience

WorkaroundEPSS %46 mo ago

-

CVE-2025-2747 Actively exploitedKentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability

VendorKentico ProductXperience CMS

Workaround Public Exploits:1EPSS %971 y ago

-

CVE-2019-10068 Actively exploitedKentico Xperience Deserialization of Untrusted Data Vulnerability

VendorKentico ProductXperience

Workaround Public Exploits:2EPSS %954 y ago

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free key Documentation

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-2746"