{"id":"CVE-2026-105046","revision":"eef7bfc285724447a8cd933dbc4c2227","records":[{"revision":"eef7bfc285724447a8cd933dbc4c2227","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-105046","aliases":[],"title":"Kentico Xperience 13 before 13.0.216 lacks object-level authorization checks for administration API endpoints.","description":"Kentico Xperience 13 before 13.0.216 lacks object-level authorization checks for administration API endpoints.","state":0,"publishedAt":"2026-10-02T21:51:34.92+00:00","modifiedAt":"2026-10-06T16:42:44.885+00:00","affected":[{"ecosystem":"Vendor product","name":"Xperience","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"defaultStatus\": \"unaffected\",\n                    \"product\": \"Xperience\",\n                    \"vendor\": \"Kentico\",\n                    \"versions\": [\n                        {\n                            \"lessThan\": \"13.0.216\",\n                            \"status\": \"affected\",\n                            \"version\": \"13.0.0\",\n                            \"versionType\": \"semver\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","score":4.3,"severity":"MEDIUM"}],"references":["https://www.kentico.com/platform","https://devnet.kentico.com/download/hotfixes"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-105046","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-105046","identifiers":["CVE-2026-105046"]},"retained":false,"historicalAffected":[]}],"coverage":[]}