VulnSocial

CVE-2026-7198Patch(progress / sitefinity)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch progress sitefinity systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

CWE-284: Improper Access Control in web services in Progress Sitefinity 15.4.8623 before 15.4.8630 allows a remote unauthenticated attacker to access content that should be restricted, resulting in full compromise of confidentiality, integrity, and availability of affected installations.

progress CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-284

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • sitefinity

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 3 signals
  • Disclosure: 1 classified signal
  • Peaked 2d ago at 1 mentions (2026-06-02); latest day: 1
  • 3 total mentions across 3 days

Affected systems

Vendors
progress
Products
sitefinity

Deep dive

Activity timeline3 mentions / 3d
00111Mentions · 2026-06-02: 1Mentions · 2026-06-03: 1Mentions · 2026-06-07: 1Patch / Workaround · 2026-06-03: 1Patch / Workaround · 2026-06-07: 1Technical Details · 2026-06-02: 1Technical Details · 2026-06-03: 1Technical Details · 2026-06-07: 106-0206-0306-07
Signal classification2 categories
Patch
266.7%
Disclosure
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-06-021
Disclosure1
2026-06-031
Patch1
2026-06-071
Patch1
Full discourse3 posts
  • CCB Alert@CCBalert
    Patch

    Warning: Multiple vulnerabilities in #Progress #Sitefinity CMS (CVE-2026-7312, CVE-2026-7198, CVE-2026-7195, CVE-2026-7201, CVE-2026-7313). Successful exploitation could lead to unauthorized access, information disclosure and privilege escalation. https://ccb.belgium.be/advisories/warning-multiple-critical-vulnerabilities-progress-sitefinity-patch-immediately #Patch

    Post summary

    Belgian CERT alerts about multiple critical vulnerabilities in Progress Sitefinity CMS and urges immediate patching.

    01000202
    7.2K followersView on X
  • SecAlerts@SecAlertsCo
    Patch

    CVE-2026-7198: Critical 9.8 in Progress Sitefinity 15.4.8623. Zero auth needed for remote attackers to access restricted content via broken web service access controls. Upgrade to 15.4.8630+ now. #Sitefinity https://secalerts.co/vulnerability/CVE-2026-7198 https://t.co/an1d1AoDCJ

    Post summary

    The tweet alerts to a critical CVE in Progress Sitefinity that enables unauthenticated remote attackers to access restricted content, urges upgrading to version 15.4.8630+, and provides a link to the vulnerability report.

    0000066
    832 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-7198 Improper Access Control in Progress Sitefinity 15.4.8623 Before 15.4.8630 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-7198

    Post summary

    The text announces CVE-2026-7198 as an Improper Access Control vulnerability in Progress Sitefinity versions 15.4.8623 before 15.4.8630, but does not provide exploitation evidence, PoC, or patch information.

    0000058
    4.0K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appprogresssitefinity---

Explore more

Back to dashboardprogress CVEssitefinity vulnerabilities