CVE-2025-2746Kentico Xperience <= 13.0.172 Staging Sync Server Digest Password Authentication Bypass
Explotación conocida — Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability
CISA confirmó el 20.10.2025 que esta vulnerabilidad se usa en ataques reales. Plazo para las agencias federales de EE. UU.: 10.11.2025.
Acción requerida: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. https://devnet.kentico.com/download/hotfixes ; https://nvd.nist.gov/vuln/detail/CVE-2025-2746
Descripción
An authentication bypass vulnerability in Kentico Xperience allows authentication bypass via the Staging Sync Server password handling of empty SHA1 usernames in digest authentication. Authentication bypass allows an attacker to control administrative objects.This issue affects Xperience through 13.0.172.
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
Referencias y parches
- https://labs.watchtowr.com/bypassing-authentication-like-its-the-90s-pre-auth-rce-chain-s-in-kentico-xperience-cms/ technical-descriptionexploitExploitThird Party Advisory
- https://devnet.kentico.com/download/hotfixes vendor-advisorypatchPatch
- https://github.com/watchtowrlabs/kentico-xperience13-AuthBypass-wt-2025-0011 exploitThird Party Advisory
- https://www.vulncheck.com/advisories/kentico-xperience-staging-sync-server-digest-password-authentication-bypass third-party-advisoryThird Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-2746 US Government Resource
Coincidencias CPE (NVD) (1)
cpe:2.3:a:kentico:xperience:*:*:*:*:*:*:*:*≤ 13.0.172