CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Kentico Xperience Staging Sync Server Authentication Bypass and Remote Code Execution (CVE-2025-2747)
[Affected Scope] Kentico Xperience through version 13.0.178 with Staging Sync Server enabled
[Impact] Unauthenticated attackers can bypass authentication to control administrative objects, leading to full Remote Code Execution (RCE)
[Mitigation] Apply the official Kentico hotfix immediately and restrict external access to the Staging Sync Server endpoint
Kentico Xperience Staging Sync Server Authentication Bypass and Remote Code Execution (CVE-2025-2746)
[Affected Scope] Kentico Xperience versions up to and including 13.0.172
[Impact] Attackers can bypass authentication to gain administrative control, potentially leading to full system compromise and Remote Code Execution (RCE)
[Mitigation] Apply the official hotfix immediately, or restrict access to the Staging Sync Server endpoint via IP whitelisting