Exploited vulnerabilities
Kentico
4 Kentico vulnerabilities in the CISA KEV catalogue: those for which the US cybersecurity agency has evidence of exploitation in real attacks.
In the catalogue4
Last 12 months1
In ransomware campaigns0
Last addition20 April 2026
The vulnerabilities4
- 20 April 2026CVE-2025-2749Kentico XperienceKentico Xperience Path Traversal Vulnerability
- 20 October 2025CVE-2025-2747Xperience CMSKentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability
- 20 October 2025CVE-2025-2746Xperience CMSKentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability
- 25 March 2022CVE-2019-10068XperienceKentico Xperience Deserialization of Untrusted Data Vulnerability
Data: CISA Known Exploited Vulnerabilities (KEV) catalogue, last addition on 4 November 2026.
The catalogue lists only vulnerabilities with evidence of exploitation, not all of the vendor's vulnerabilities.
Alerts only on the products you use
With My Defence you receive alerts and briefings only on the products you use, Kentico included.