CVE-2026-105046

Published: Ott 03, 2026 Last Modified: Ott 03, 2026

ExploitDB:

Other exploit source:

Google Dorks:

MEDIUM 4,3

Source: [email protected]

Attack Vector: network

Attack Complexity: low

Privileges Required: low

User Interaction: none

Scope: unchanged

Confidentiality: low

Integrity: none

Availability: none

AI Translation Available

Kentico Xperience 13 before 13.0.216 lacks object-level authorization checks for administration API endpoints.

425

Incomplete

Abstraction: Base Structure: Simple

Security Scopes Affected:

Confidentiality Integrity Availability Access Control

Potential Impacts:

Read Application Data Modify Application Data Execute Unauthorized Code Or Commands Gain Privileges Or Assume Identity

Technologies: Web Based, Web Server