XP
Product
Xperience
by Kentico · last CVE Oct 2, 2026
On CISA KEVExploited in the wild
51
CVEs
4
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 6High 14Medium 31Low 0
Watch

Add Xperience to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-2747
In wildKEV
9.8
97%
Mar 24
Kentico Xperience <= 13.0.178 Staging Sync Server None Password Type Authentication Bypass
Affected: through 13.0.178
CVE-2025-2746
In wildKEV
9.8
74%
Mar 24
Kentico Xperience <= 13.0.172 Staging Sync Server Digest Password Authentication Bypass
Affected: through 13.0.172
CVE-2019-10068
In wildKEV
9.8
95%
Mar 26
Kentico Xperience Deserialization of Untrusted Data Vulnerability
Affected: 9.0.0 through 9.0.51; 10.0.0 before 10.0.52; 11.0.0 before 11.0.48; 12.0.0 before 12.0.15
CVE-2025-2749
In wildKEV
7.2
4%
Mar 24
Kentico Xperience <= 13.0.178 Staging Media File Upload Authenticated RCE
Affected: through 13.0.178
Showing 4