MSRXMSRXSecurity
Vendors / Kentico

Kentico vulnerabilities being exploited

1 Kentico flaw was confirmed exploited in the wild in the past 365 days, across 1 product: Kentico Xperience. If you run any of them, patch these first.

AddedExploited vulnerabilityFix by
2026-04-20CVE-2025-2749 Kentico Xperience
Kentico Xperience Path Traversal Vulnerability

Kentico Xperience contains a path traversal vulnerability that could allow an authenticated user's Staging Sync Server to upload arbitrary data to path relative locations.

2026-05-04
Watch my Kentico softwareScan a websiteAll vendors

Source: CISA Known Exploited Vulnerabilities catalog 2026.10.29 (live). A listing means some versions are affected: check yours in the advisory. Guidance only.