CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2025-03-24
Kentico Xperience Staging Sync Server Authentication Bypass and Remote Code Execution (CVE-2025-2747)
[Affected Scope] Kentico Xperience through version 13.0.178 with Staging Sync Server enabled
[Impact] Unauthenticated attackers can bypass authentication to control administrative objects, leading to full Remote Code Execution (RCE)
[Mitigation] Apply the official Kentico hotfix immediately and restrict external access to the Staging Sync Server endpoint