Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2026-7198

CWE-284: Improper Access Control in web services in Progress Sitefinity

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ProgressSoftware

Description

CWE-284: Improper Access Control in web services in Progress Sitefinity 15.4.8623 before 15.4.8630 allows a remote unauthenticated attacker to access content that should be restricted, resulting in full compromise of confidentiality, integrity, and availability of affected installations.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Progress Software Sitefinity

Default version status: unaffected

  • 15.4.8623 to < 15.4.8630affected

References