PT-2025-12669 · Kentico · Kentico Xperience

Piotr Bazydlo · Published 2025-03-24 · Updated 2025-11-06 · CVE-2025-2747

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Kentico Xperience versions through 13.0.178

Description An authentication bypass issue exists in Kentico Xperience through the Staging Sync Server component. The issue is related to how passwords are handled for servers defined as type 'None'. Successful exploitation allows an attacker to bypass authentication and gain control of administrative objects. This vulnerability has been identified as critical and is actively exploited.

Recommendations Versions prior to 13.0.178 should be updated. As a temporary workaround, consider disabling the Staging Sync Server component until a patch is available.

Exploit

Fix

Authentication Bypass Using an Alternate Path or Channel

Improper Authentication

Weakness Enumeration

CWE-288

CWE-287

Related Identifiers

CVE-2025-2747

Affected Products

Kentico Xperience

References · 26

• 🔥 https://github.com/watchtowrlabs/kentico-xperience13-AuthBypass-wt-2025-0011 · Exploit
• 🔥 https://labs.watchtowr.com/bypassing-authentication-like-its-the-90s-pre-auth-rce-chain-s-in-kentico-xperience-cms · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-2747 · Security Note
• https://osv.dev/vulnerability/CVE-2025-2747 · Vendor Advisory
• https://twitter.com/RedTeamNewsBlog/status/1904296079778324867 · Twitter Post
• https://t.me/cvetracker/19786 · Telegram Post
• https://twitter.com/Ctaesandriod2/status/1922310849974170105 · Twitter Post
• https://t.me/cvedetector/20998 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1904305028946636818 · Twitter Post
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-2747 · Note
• https://twitter.com/0dayPublishing/status/1980290237659025621 · Twitter Post
• https://t.me/cveNotify/139062 · Telegram Post
• https://devnet.kentico.com/download/hotfixes · Patch, Security Note, Vendor Advisory
• https://reddit.com/r/TechNadu/comments/1ocihwg/cisa_adds_5_new_actively_exploited · Reddit Post
• https://twitter.com/ScyScan/status/1980304283422867747 · Twitter Post