Skip to content
COOEY

EXPOSURES › CVE-2025-2747

CVE-2025-2747

HIGH ⌖ ON CISA KEV · EXPLOITED
DETAIL
SourceCISA-KEV · kev Published2025-10-20 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2025-2747 ↗
⚡ RCE ⌖ EXPLOITED IN THE WILD SHAME 72/100 exploited-in-wildunpatched

Kentico Xperience CMS had an unpatched authentication bypass vulnerability actively exploited in the wild

Kentico Xperience CMS suffered an unpatched authentication bypass vulnerability that allowed attackers to control administrative objects, leading to potential data breaches.

Shame score — An actively exploited vulnerability in a widely-used CMS, indicating negligence in security updates.

▸ RECOMMENDED ACTION  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

PLAYERS IMPLICATED
Kentico · vendorXperience CMS · product
DESCRIPTION

Kentico Xperience CMS contains an authentication bypass using an alternate path or channel vulnerability that could allow an attacker to control administrative objects.

AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.