Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2025-2747

Kentico Xperience <= 13.0.178 Staging Sync Server None Password Type Authentication Bypass

Kentico Xperience versions up to and including 13.0.178 are affected when the Staging Service is enabled and uses username/password authentication rather than X.509. The fix is Hotfix 178.

Published
Last modified
published
Listed in CISA KEV
Actively exploited
Fix
Fixed in Hotfix 178
None on Exploit-DB, Metasploit or GitHub

Summary

Kentico Xperience, a web content management and digital experience platform, is affected through its Staging Sync Server component when it is configured with the "None" password type. An attacker could bypass authentication and gain control over administrative objects in the affected system.

Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.

Read the original description

An authentication bypass vulnerability in Kentico Xperience allows authentication bypass via the Staging Sync Server component password handling for the server defined None type. Authentication bypass allows an attacker to control administrative objects.This issue affects Xperience through 13.0.178.

Timeline

  1. CVE published
  2. Added to CISA KEV

    CISA has evidence of exploitation in the wild

  3. CISA remediation deadline

    Due date for US federal agencies to patch

  4. Record last updated
  5. EPSS reached 10%

    FIRST estimates at least a 10% chance of exploitation in the next 30 days

Affected versions

  • Kentico Xperience

    through 13.0.178

References 4

labs.watchtowr.com

devnet.kentico.com

GitHub · watchtowrlabs/kentico-xperience13-AuthBypass-wt-2025-0011

vulncheck.com

FAQ

Questions about CVE-2025-2747

What does this mean?

The Staging Sync Server has an authentication bypass that involves its username/password login. Documentation cited by the researchers suggests it may allow control over CMS pages, and the bypass can be chained to remote code execution.Source: labs.watchtowr.com, github.com

Am I affected, and how do I check?

Kentico Xperience 13.0.178 and earlier versions are in scope. The Staging Service is disabled by default, and the issue applies only when it is enabled and configured with username/password authentication rather than X.509. To check, confirm the installed version and review the Staging Service settings on the target.Source: labs.watchtowr.com, github.com

What should I do about it?

Install Hotfix 178, which the vendor says delivers a patch that is not vulnerable.Source: labs.watchtowr.com, github.com

Is it being exploited?

Yes. CISA added it to its Known Exploited Vulnerabilities catalog on 2025-10-20, which means it has evidence of attacks. No public exploit code is tracked.Source: cisa.gov, cve.now feed data