Intrusion PreventionKentico.CMS.Xperience.Staging.Sync.Server.Authentication.Bypass
Description
This indicates an attack attempt to exploit an Authentication Bypass in Kentico Xperience.
The vulnerability is due to a lack of proper validation of user-supplied data. A remote attacker may be able to exploit this to bypass security checks on vulnerable systems
Affected Products
Kentico Xperience version 13.0.178 and prior
Impact
Security Bypass: Remote attackers can bypass security features of vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://devnet.kentico.com/download/hotfixes
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| ID | 59281 |
| Created | Oct 27, 2025 |
| Updated | Jan 12, 2026 |
| CVE ID | |
| Risk |
|
| Known Exploited | Yes |
| Exploit Prediction Score | 89.45% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | Other |
| Profile Type | Improper Authentication |