CVE-2020-36890 — Kentico Xperience <= 10 Administrator Access Control Bypass
An access control bypass vulnerability in Kentico Xperience allows administrators to modify global administrator user privileges via unauthorized requests. Attackers could poten…
Published: 2025-12-18 · CVSS: 8.6 · CVSS 4.0
An access control bypass vulnerability in Kentico Xperience allows administrators to modify global administrator user privileges via unauthorized requests. Attackers could potentially compromise global administrator accounts and invalidate security-sensitive macros by manipulating user privilege levels.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7