CVE-2019-10068CISA KEVEPSS p99.9%

CVE-2019-10068Kentico Xperience Deserialization of Untrusted Data Vulnerability

Kentico / Xperience

Description

Kentico contains a failure to validate security headers. This deserialization can led to unauthenticated remote code execution.

Scoring

EPSS96.03% probability of exploitation · percentile 99.9% · 2026-06-15T12:03:41Z

CISA KEV entry

Added to KEV: 2022-03-25

(incoming)1

TypeTargetConfidenceTier
KEVEntryKentico Xperience Deserialization of Untrusted Data Vulnerabilitykev-cve-2019-100680%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability
CVE
Kentico Xperience Path Traversal Vulnerability
CVE
Sitecore XP Remote Command Execution Vulnerability
CVE
Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability
CVE
Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability
CVE
CVE-2025-53691
Sourced from NVD + CISA KEV + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.