Description Kentico CMS up to 9.0.50/10.0.47 CMS Administration Dashboard CMSInstall/install.aspx 访问控制漏洞
References https://nvd.nist.gov/vuln/detail/CVE-2017-17736 https://www.tenable.com/plugins/was/98994 https://www.cvedetails.com/cve/CVE-2017-17736/ https://avd.aliyun.com/detail?id=AVD-2017-17736 https://www.cve.org/CVERecord?id=CVE-2017-17736 https://cve.circl.lu/vuln/cve-2017-17736 https://feedly.com/cve/vendors/kentico
Related VulnerabilitiesPoCCVE-2022-27925: Zimbra Collaboration Suite 8.8.15/9.0 - Zip Path TraversalPoCCVE-2026-0692: BlueSnap Payment Gateway for WooCommerce <=3.4.0 - IPN Authorization BypassPoCCVE-2026-21589: Atlassian Jira/Confluence/Bitbucket - Pre-Auth Arbitrary File ReadPoCCVE-2026-29058: WWBN AVideo Encoder < 7.0 - Unauthenticated OS Command InjectionPoCCVE-2026-49468: LiteLLM Proxy < 1.84.0 - Host Header Authentication BypassPoCCVE-2025-62593: Ray < 2.52.0 - Remote Code ExecutionPoCCVE-2026-56681: 9router <=0.5.4 - Authentication BypassPoCCVE-2026-87902: WordPress Core - PHP Template Path TraversalPoCCVE-2026-89013: Dolibarr < 24.0.0 - Authorization Bypass via hashp ParameterPoCCVE-2026-89063: Bookly <=28.1 - IDOR Unauthenticated Sensitive Data Access关于U9 cloud存在命令执行漏洞的安全通告关于U9 cloud存在接口反序列化漏洞的安全通告PoCCVE-2026-49060: Hippoo Mobile App for WooCommerce - Broken Access Control