CVE-2025-2749: Kentico Xperience Path Traversal Vulnerability. Kentico
Kentico Xperience Path Traversal Vulnerability. Kentico Xperience contains a path traversal vulnerability that could allow an authenticated user's Staging Sync Server to upload arbitrary data to path relative locations.
- CISA KEV-listed (remediation due 2026-05-04)
- EPSS 4.8% (89.7% percentile)