EIP-2026-100387

This is a technical writeup describing an information disclosure vulnerability in Kentico CMS versions 7.0.75 and earlier. The vulnerability allows unauthenticated access to a page that enumerates all user accounts via a direct URL.