THREATOPS
THREAT OPSCVEs › CVE-2025-2746

CVE-2025-2746 — Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability

CISA KEVExploited: confirmedKentico

Kentico Xperience CMS contains an authentication bypass using an alternate path or channel vulnerability that could allow an attacker to control administrative objects.

Vulnerability details