CVE-2025-2746: Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability

Published Mar 24, 2025
·
Updated

An authentication bypass vulnerability in Kentico Xperience allows authentication bypass via the Staging Sync Server password handling of empty SHA1 usernames in digest authentication. Authentication bypass allows an attacker to control administrative objects.This issue affects Xperience through 13.0.172.

Other sources

Kentico Xperience CMS contains an authentication bypass using an alternate path or channel vulnerability that could allow an attacker to control administrative objects.

CISA

Affected Software

3 affected components
Kentico Xperience<=13.0.172
Kentico Xperience<=13.0.172
Kentico Xperience CMS

Event History

Mar 24, 2025
CVE Published
via MITRE·06:16 PM
Data Sourced
via MITRE·06:16 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Oct 20, 2025
Known Exploited
via CISA·12:00 AM
Data Sourced
via CISA·12:00 AM
RemedyDescriptionAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2025-2746?

CVE-2025-2746 is classified as a high severity vulnerability due to its potential for authentication bypass.

2

How do I fix CVE-2025-2746?

To fix CVE-2025-2746, update Kentico Xperience to version 13.0.173 or later.

3

Who is affected by CVE-2025-2746?

CVE-2025-2746 affects all instances of Kentico Xperience prior to version 13.0.173.

4

What type of vulnerability is CVE-2025-2746?

CVE-2025-2746 is an authentication bypass vulnerability.

5

What can an attacker do by exploiting CVE-2025-2746?

An attacker exploiting CVE-2025-2746 can control administrative objects within the affected Kentico Xperience instance.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203