CVE-2026-7198

CRITICAL 9.8CVE-2026-7198 · Published 02/06/2026 · updated 22/07/2026

Package	Affected versions	Patched versions
sitefinity progress	`≥ 15.4.8623, < 15.4.8630`	`15.4.8630`

Description

CWE-284: Improper Access Control in web services in Progress Sitefinity 15.4.8623 before 15.4.8630 allows a remote unauthenticated attacker to access content that should be restricted, resulting in full compromise of confidentiality, integrity, and availability of affected installations.

References

community.progress.com/s/article/Sitefinity-Security-Advisory-for-Addressing-Security-Vulnerabilities-CVE-2026-7312-CVE-2026-7198-CVE-2026-7195-CVE-2026-7201-CVE-2026-7313-May-2026 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free