Description
A security issue exists in Kentico Xperience 13 (before Hotfix 173) when the Staging Service is enabled with username/password authentication. This vulnerability may allow unauthorized access or misuse of staging functionality.
kentico-13-auth-bypass-wt-2025-0006: Kentico Xperience 13 CMS - Staging Service Authentication Bypass (WT-2025-0006)
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/watchtowrlabs/kentico-xperience13-AuthBypass-wt-2025-0006
https://labs.watchtowr.com/bypassing-authentication-like-its-the-90s-pre-auth-rce-chain-s-in-kentico-xperience-cms/
https://nvd.nist.gov/vuln/detail/CVE-2025-2747
https://www.ionix.io/blog/authentication-bypass-vulnerabilities-cve-2025-2746-cve-2025-2747/
https://cyberpress.org/vulnerabilities-kentico/
https://www.rapid7.com/db/vulnerabilities/kentico-xperience-cve-2025-2746/
https://www.vulncheck.com/advisories/kentico-xperience-staging-sync-server-none-password-type-authentication-bypass
https://gbhackers.com/kentico-xperience-cms-vulnerability/
https://docs.kentico.com/documentation/security-advisories
https://www.tenable.com/plugins/nessus/271230