What’s Vulnerable › Vulnerabilities

CVE-2025-2794: Kentico Xperience <= 13.0.180 Unsafe Reflection

• Severity: high (CVSS 8.7 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-03-31 · updated 2026-06-17
• Weakness: CWE-470

Description

An unsafe reflection vulnerability in Kentico Xperience allows an unauthenticated attacker to kill the current process, leading to a Denial-of-Service condition. This issue affects Xperience: through 13.0.180.

Affected products

• Kentico Xperience: through 13.0.180

References

• https://devnet.kentico.com/download/hotfixes
• https://www.vulncheck.com/advisories/kentico-xperience-unsafe-reflection

Get alerted when CVE-2025-2794 or the next vulnerability affects your stack