CVE-2025-2746βKentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability
PUBLISHEDvulnerability record
2025-10-20 Β· last modified October 20, 2025
Metadata
Vulnerability Name
Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability
Description
Kentico Xperience CMS contains an authentication bypass using an alternate path or channel vulnerability that could allow an attacker to control administrative objects.
Known To Be Used in Ransomware Campaigns?
Action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.