CVE-2025-2747

9.8 CRITICAL CISA KEV - Actively Exploited
Published: March 24, 2025 Modified: November 06, 2025
View on NVD

Description

An authentication bypass vulnerability in Kentico Xperience allows authentication bypass via the Staging Sync Server component password handling for the server defined None type. Authentication bypass allows an attacker to control administrative objects.This issue affects Xperience through 13.0.178.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

CVSS v3.x Details

0.0 Low Medium High Critical 10.0
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
https://devnet.kentico.com/download/hotfixes
Source: disclosure@vulncheck.com
Patch
https://github.com/watchtowrlabs/kentico-xperience13-AuthBypass-wt-2025-0011
Source: disclosure@vulncheck.com
Third Party Advisory
https://labs.watchtowr.com/bypassing-authentication-like-its-the-90s-pre-auth-rce-chain-s-in-kentico-xperience-cms/
Source: disclosure@vulncheck.com
Exploit Third Party Advisory
https://www.vulncheck.com/advisories/kentico-xperience-staging-sync-server-none-password-type-authentication-bypass
Source: disclosure@vulncheck.com
Third Party Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-2747
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
US Government Resource

5 reference(s) from NVD

Quick Stats

CVSS v3 Score
9.8 / 10.0
EPSS (Exploit Probability)
88.9%
99th percentile
Exploitation Status
Actively Exploited
Remediation due: 2025-11-10

Weaknesses (CWE)

CWE-288

Affected Vendors

kentico

Related CVEs

CVE-2025-52691 10.0
CVE-2025-15168 7.3
CVE-2025-15167 7.3
CVE-2025-15166 7.3
CVE-2025-15165 7.3