Description
An authentication bypass vulnerability in Kentico Xperience allows authentication bypass via the Staging Sync Server component password handling for the server defined None type. Authentication bypass allows an attacker to control administrative objects.This issue affects Xperience through 13.0.178.
Metrics
CVSS 3.1 9.8/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Kentico | Xperience | <= 13.0.178 |
References
- https://devnet.kentico.com/download/hotfixesPatch
- https://github.com/watchtowrlabs/kentico-xperience13-AuthBypass-wt-2025-0011Third Party Advisory
- https://labs.watchtowr.com/bypassing-authentication-like-its-the-90s-pre-auth-rce-chain-s-in-kentico-xperience-cms/Exploit, Third Party Advisory
- https://www.vulncheck.com/advisories/kentico-xperience-staging-sync-server-none-password-type-authentication-bypassThird Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-2747US Government Resource
Timeline
- Published
- Mar 24, 2025
- Last modified
- Jun 17, 2026
- Added to CISA KEV
- Oct 20, 2025
- NVD status
- Analyzed