Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2026-105046

Kentico Xperience 13 before 13.0.216 lacks object-level authorization checks for administration API endpoints.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
mitre

Description

Kentico Xperience 13 before 13.0.216 lacks object-level authorization checks for administration API endpoints.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Kentico Xperience

Default version status: unaffected

  • 13.0.0 to < 13.0.216affected

References