kentico
Safeguard articles tagged "kentico" — guides, analysis, and best practices for software supply chain and application security.
5 articles
CVE-2019-10068: Kentico Xperience Deserialization of Untrusted Data Vulnerability
CVE-2019-10068 affects Kentico Xperience and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2022-03-25.
CVE-2025-2747: Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability
CVE-2025-2747 affects Kentico Xperience CMS and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2025-10-20.
CVE-2025-2746: Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability
CVE-2025-2746 affects Kentico Xperience CMS and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2025-10-20.
CVE-2025-2749: Kentico Xperience Path Traversal Vulnerability
CVE-2025-2749 affects Kentico Kentico Xperience and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-04-20.
Three Kentico Xperience CVEs Chain Into Pre-Auth RCE Through One Component
Two authentication bypasses and a path traversal bug all target Kentico Xperience's Staging Sync Server, chaining into a documented pre-authentication remote code execution path.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.