CVE-2025-2749Kentico Xperience <= 13.0.178 Staging Media File Upload Authenticated RCE

An authenticated remote code execution in Kentico Xperience allows authenticated users Staging Sync Server to upload arbitrary data to path relative locations. This results in path traversal and arbitrary file upload, including content that can be executed server side leading to remote code execution.This issue affects Kentico Xperience through 13.0.178.

7.2 HIGHEPSS 4.02%⚡ Known Exploited (CISA KEV)NVD: Published

Last updated: 2026-04-21 03:55 UTC

Overview Affected Products References

NVD CVE.org

Overview

Severity

Score	Severity	Version	Vector String
7.2	HIGH	3.1VulnCheck (CNA)	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Details

CVE ID: CVE-2025-2749
Status: Published
Assigner (CNA): VulnCheck
Published: Mar 24, 2025
Last modified: 2026-04-21 03:55 UTC
Weaknesses: CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-434 · Unrestricted Upload of File with Dangerous Type

Sources

NVD (unavailable at last refresh)
CVE.org
CISA KEV
FIRST EPSS

Refreshed hourly from the sources above. Last fetched 2026-11-07 15:44 UTC.