Kentico Xperience CMS: 2 exploited vulnerabilities (CVE-2025-2746, CVE-2025-2747) ยท updates https://pwn.watch/i/kentico-xperience-cms-cve-2025-2746 CVE-2025-2746: Kentico Xperience CMS contains an authentication bypass using an alternate path or channel vulnerability that could allow an attacker to control administrative objects. CVE-2025-2747: Kentico Xperience CMS contains an authentication bypass using an alternate path or channel vulnerability that could allow an attacker to control administrative objects. Added to CISA KEV on 2025-10-20. en Mon, 20 Oct 2025 00:00:00 GMT Kentico Xperience CMS: 2 exploited vulnerabilities (CVE-2025-2746, CVE-2025-2747): CISA added CVE-2025-2746 to the KEV catalog (due 2025-11-10). https://pwn.watch/i/kentico-xperience-cms-cve-2025-2746 https://pwn.watch/i/kentico-xperience-cms-cve-2025-2746#2025-10-20-5162182b Mon, 20 Oct 2025 00:00:00 GMT critical <p>Kentico Xperience CMS: 2 exploited vulnerabilities (CVE-2025-2746, CVE-2025-2747): CISA added CVE-2025-2746 to the KEV catalog (due 2025-11-10).</p> Kentico Xperience CMS: 2 exploited vulnerabilities (CVE-2025-2746, CVE-2025-2747): CISA added CVE-2025-2747 to the KEV catalog (due 2025-11-10). https://pwn.watch/i/kentico-xperience-cms-cve-2025-2746 https://pwn.watch/i/kentico-xperience-cms-cve-2025-2746#2025-10-20-42444196 Mon, 20 Oct 2025 00:00:00 GMT critical <p>Kentico Xperience CMS: 2 exploited vulnerabilities (CVE-2025-2746, CVE-2025-2747): CISA added CVE-2025-2747 to the KEV catalog (due 2025-11-10).</p>