CVE-2019-10068
Kentico Xperience
Kentico Xperience Deserialization of Untrusted Data Vulnerability
What it is
Kentico contains a failure to validate security headers. This deserialization can led to unauthenticated remote code execution.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other Kentico entries on the list
- Kentico Xperience Kentico Xperience Path Traversal Vulnerability CVE-2025-2749 · Apr 20, 2026
- Xperience CMS Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability CVE-2025-2747 · Oct 20, 2025
- Xperience CMS Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability CVE-2025-2746 · Oct 20, 2025