CVE-2025-2747 Kentico Xperience CMS
Kentico Xperience CMS contains an authentication bypass using an alternate path or channel vulnerability that could allow an attacker to control administrative objects.
- CVSS
- not scored
On CISA’s exploited list
Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability
- Added
- 2025-10-20
- Federal patch deadline
- 2025-11-10
- Ransomware use
- not known