← CVE Radar
CVE-2025-2747Kentico Xperience <= 13.0.178 Staging Sync Server None Password Type Authentication Bypass
An authentication bypass vulnerability in Kentico Xperience allows authentication bypass via the Staging Sync Server component password handling for the server defined None type. Authentication bypass allows an attacker to control administrative objects.This issue affects Xperience through 13.0.178.
9.8 CRITICALEPSS 97.16%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 9.8 | CRITICAL | 3.1VulnCheck (CNA) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
CISA required action
⚡ Known exploited · remediation due Nov 10, 2025
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Details
- CVE ID
- CVE-2025-2747
- Status
- Analyzed
- Assigner (CNA)
- VulnCheck
- Published
- Mar 24, 2025
- Last modified
- 2026-06-17 09:07 UTC
- Weaknesses
- CWE-288 · Authentication Bypass Using an Alternate Path or Channel
Affected Products
As published by the CNA in the CVE record.
KenticoXperience1 version range
- through 13.0.178
References
- devnet.kentico.com https://devnet.kentico.com/download/hotfixes
- github.com https://github.com/watchtowrlabs/kentico-xperience13-AuthBypass-wt-2025-0011
- labs.watchtowr.com https://labs.watchtowr.com/bypassing-authentication-like-its-the-90s-pre-auth-rce-chain-s-in-kentico-xperience-cms/
- vulncheck.com https://www.vulncheck.com/advisories/kentico-xperience-staging-sync-server-none-password-type-authentication-bypass
- cisa.gov https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-2747