PT-2026-45760 · Progress · Sitefinity

CVE-2026-7198 · Published 2026-06-02 · Updated 2026-06-07

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Progress Sitefinity versions 15.4.8623 through 15.4.8629

Description Improper Access Control in web services allows a remote unauthenticated attacker to access restricted content. This can lead to a full compromise of confidentiality, integrity, and availability of the affected installations.

Recommendations Update to version 15.4.8630.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2026-7198

Affected Products

Sitefinity

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2026-7198 · Security Note
• https://community.progress.com/s/article/Sitefinity-Security-Advisory-for-Addressing-Security-Vulnerabilities-CVE-2026-7312-CVE-2026-7198-CVE-2026-7195-CVE-2026-7201-CVE-2026-7313-May-2026 · Vendor Advisory
• https://t.me/cveNotify/165975 · Telegram Post
• https://twitter.com/SecAlertsCo/status/2063706442440274274 · Twitter Post
• https://t.me/cveNotify/165971 · Telegram Post
• https://t.me/cveNotify/165972 · Telegram Post
• https://t.me/cveNotify/165976 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2061844115373850874 · Twitter Post
• https://t.me/CVEtracker/55615 · Telegram Post
• https://t.me/cveNotify/165970 · Telegram Post