CVE-2025-2746

Published Mar 24, 2025

Last updated a month ago

Exploit known CVSS critical 9.8

Kentico Xperience

Overview

Description: An authentication bypass vulnerability in Kentico Xperience allows authentication bypass via the Staging Sync Server password handling of empty SHA1 usernames in digest authentication. Authentication bypass allows an attacker to control administrative objects.This issue affects Xperience through 13.0.172.
Source: disclosure@vulncheck.com
NVD status: Analyzed
Products: xperience

Risk scores

CVSS 3.1

Type: Secondary
Base score: 9.8
Impact score: 5.9
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: CRITICAL

Known exploits

Data from CISA

Vulnerability name: Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability
Exploit added on: Oct 20, 2025
Exploit action due: Nov 10, 2025
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Weaknesses

disclosure@vulncheck.com: CWE-288

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:kentico:xperience:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5F120158-7BB3-4080-9DBD-2DEA83B05EB1",
            "versionEndIncluding": "13.0.172"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.

Overview

Risk scores

CVSS 3.1

Known exploits

Weaknesses

Social media

Configurations

References