medium4.3
CVE-2026-105046
Kentico Xperience 13 before 13.0.216 lacks object-level authorization checks for administration API endpoints.
Impact
Kentico Xperience 13 before 13.0.216 lacks object-level authorization checks for administration API endpoints.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kentico | Kentico Xperience 13 | before 13.0.216 |
Versions were read from the advisory text. No structured product data has been published for this record yet.