← CVE Radar
CVE-2025-2746Kentico Xperience <= 13.0.172 Staging Sync Server Digest Password Authentication Bypass
An authentication bypass vulnerability in Kentico Xperience allows authentication bypass via the Staging Sync Server password handling of empty SHA1 usernames in digest authentication. Authentication bypass allows an attacker to control administrative objects.This issue affects Xperience through 13.0.172.
9.8 CRITICALEPSS 74.05%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 9.8 | CRITICAL | 3.1VulnCheck (CNA) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
CISA required action
⚡ Known exploited · remediation due Nov 10, 2025
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Details
- CVE ID
- CVE-2025-2746
- Status
- Analyzed
- Assigner (CNA)
- VulnCheck
- Published
- Mar 24, 2025
- Last modified
- 2026-06-17 09:07 UTC
- Weaknesses
- CWE-288 · Authentication Bypass Using an Alternate Path or Channel
Affected Products
As published by the CNA in the CVE record.
KenticoXperience1 version range
- through 13.0.172
References
- devnet.kentico.com https://devnet.kentico.com/download/hotfixes
- github.com https://github.com/watchtowrlabs/kentico-xperience13-AuthBypass-wt-2025-0011
- labs.watchtowr.com https://labs.watchtowr.com/bypassing-authentication-like-its-the-90s-pre-auth-rce-chain-s-in-kentico-xperience-cms/
- vulncheck.com https://www.vulncheck.com/advisories/kentico-xperience-staging-sync-server-digest-password-authentication-bypass
- cisa.gov https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-2746