Kentico Xperience 13 End of Support: December 31, 2026
Kentico ends technical support for Kentico Xperience 13 on December 31, 2026. Kentico's Product Support Lifecycle Policy lists 13.x with an End of Technical Support date of December 31, 2026, and its FAQ spells out what that means: in Xperience 13's final year Kentico ships only security hotfixes, and after the date it ceases all support, including security repairs. Kentico's table lists no later numbered version; the product above it is Xperience by Kentico, which Kentico supports under a separate policy. Live status and EOL Risk Score are on the Kentico 13 page; every Kentico version is on the Kentico page.
Key Dates at a Glance
- Kentico 13: End of Technical Support 2026-12-31
- Kentico 11: End of Technical Support 2021-11-30
- Kentico 10: End of Technical Support 2020-10-29
What Kentico's policy says
Kentico's FAQ on the end of Xperience 13 sets out two periods:
| Period | What Kentico provides for Xperience 13 |
|---|---|
| Calendar year 2026, through December 31, 2026 | Technical support via remote communication. Releases only in the form of security hotfixes; no other fixes, patches, enhancements or updates. |
| After December 31, 2026 | All support, maintenance, updates, releases, hotfixes, patches and repairs, including security repairs, cease. |
The same FAQ goes further than most vendor notices. Kentico states that any use of Xperience 13 after the end date is at the user's sole risk, that the user assumes full liability for claims and damages from security incidents arising from that use, and that all of Kentico's liability related to Xperience 13 terminates on December 31, 2026. A separate answer on the page says that when a version is no longer supported, Kentico cannot provide support even if a customer has valid maintenance. Kentico's 7-Day Bug Fixing Policy applies only to the latest supported version.
Earlier Kentico versions
Every earlier version is already past Kentico's End of Technical Support date. Kentico 12 ended at the end of 2022 for MVC sites and the end of 2023 for Portal Engine sites; Kentico 11 ended on November 30, 2021 and Kentico 10 on October 29, 2020. Kentico says legacy documentation and hotfixes for unsupported versions are in its DevNet Archive.
The exploited Xperience 13 flaws
Kentico Xperience is in CISA's Known Exploited Vulnerabilities catalog, and three of its entries concern the Staging Sync Server component of Xperience 13:
- CVE-2025-2746 and CVE-2025-2747, authentication bypass flaws that let an attacker control administrative objects, added to the catalog on October 20, 2025. The CVE records list Xperience versions through 13.0.172 and through 13.0.178 respectively as affected.
- CVE-2025-2749, a path traversal and arbitrary file upload flaw that can lead to remote code execution by an authenticated Staging Sync Server user, added on April 20, 2026. Its CVE record lists versions through 13.0.178 as affected.
An older entry, CVE-2019-10068, is a deserialization flaw in earlier Kentico versions. Until December 31, 2026, Kentico's security hotfixes are the way to close flaws like these on Xperience 13. After that date, by Kentico's own statement, no security repairs follow, so a flaw found in 2027 stays open on every Xperience 13 site.
Where to move
Kentico's current product is Xperience by Kentico. Its lifecycle page says customers may move from Xperience 13 to it on mutually agreed terms, and that the Xperience by Kentico Migration Toolkit, developed and supported by Kentico, is the supported upgrade path from earlier Kentico Xperience versions. Xperience by Kentico has its own support policy, linked from the same page; it is a different product, not a version 14, so a migration is a project rather than an in-place upgrade. Plan the timeline so that the site is not left on Xperience 13 after the end date.
What to do
- Apply every Xperience 13 security hotfix now: they are the only fixes Kentico ships in 2026. Check your hotfix level against the affected versions in the CVE records above (through 13.0.172 and 13.0.178).
- Review the Staging Sync Server: all three KEV entries are in it. If the site does not use content staging, find out from Kentico's documentation how to keep the staging service disabled.
- Start the Xperience by Kentico migration with Kentico's Migration Toolkit, or with a Kentico partner, and agree terms with Kentico.
- Read the liability terms: after December 31, 2026 Kentico disclaims liability for Xperience 13, which matters to risk and compliance owners as much as to developers.
- Check other sites: the Kentico page lists every version and its date, and the EOL Checker answers for a single version.
Frequently Asked Questions
When does Kentico Xperience 13 support end?
Kentico's Product Support Lifecycle Policy gives Kentico Xperience 13 (13.x) an End of Technical Support date of December 31, 2026. After that, Kentico says it ceases all support, maintenance, updates, releases, hotfixes, patches and repairs, including security repairs, for Xperience 13.
Does Kentico Xperience 13 still get fixes in 2026?
Only security hotfixes. Kentico's policy says that through 2026 it continues technical support via remote communication and issues releases only in the form of security hotfixes, with no other fixes, patches, enhancements or updates.
Is Kentico Xperience 13 affected by vulnerabilities in the CISA KEV catalog?
Yes. CISA's Known Exploited Vulnerabilities catalog lists CVE-2025-2746 and CVE-2025-2747, authentication bypass flaws in the Staging Sync Server, and CVE-2025-2749, a path traversal flaw in the same component. Their CVE records list Kentico Xperience 13 versions through 13.0.172 or 13.0.178 as affected.
What should Kentico Xperience 13 sites move to?
Kentico's current product is Xperience by Kentico, and Kentico says Xperience 13 customers may move to it on mutually agreed terms. Kentico's Xperience by Kentico Migration Toolkit is the supported tool for migrating from earlier Kentico Xperience versions.
Related
- Kentico — every Kentico version and its End of Technical Support date
- Sitecore — another .NET CMS with December 2026 deadlines
- Umbraco 13 LTS end of life — a .NET CMS whose LTS ends in December 2026
- Liferay DXP — digital experience platform release dates
- Extended support vendors — how support past a vendor's date works