CVE-2019-10068

Kentico Xperience Deserialization of Untrusted Data Vulnerability

Kentico — Xperience

Added to KEV catalog: 25 March 2022
Federal remediation due date: 15 April 2022
Weakness classification (CWE): CWE-502

CISA Description

Kentico contains a failure to validate security headers. This deserialization can led to unauthenticated remote code execution.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2019-10068

View on NVD View on MITRE CVE View full CISA catalog

More Kentico Vulnerabilities

CVE-2025-2749

Kentico Xperience Path Traversal Vulnerability

CVE-2025-2746

Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability

CVE-2025-2747

Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability

Confirm Your Exposure

Is this vulnerability present in your environment?

CRS delivers independent VAPT assessments that identify exactly which known-exploited vulnerabilities exist in your network, applications, and infrastructure.

Explore VAPT Services