CVE-2026-7201General(progress / sitefinity)

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch progress sitefinity systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

CWE-639: Authorization Bypass Through User-Controlled Key in web services in Progress Sitefinity 15.2.x before 15.2.8441, 15.3.x before 15.3.8531, and 15.4.x before 15.4.8630 allows a remote authenticated attacker to modify account properties of other users, potentially leading to account compromise. Successful exploitation requires knowledge of values that are not generally exposed to low-privileged users.

progress CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://community.progress.com/s/article/Sitefinity-Security-Advisory-for-Addressing-Security-Vulnerabilities-CVE-2026-7312-CVE-2026-7198-CVE-2026-7195-CVE-2026-7201-CVE-2026-7313-May-2026

Weakness type (CWE)

CWE-639

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

sitefinity

Threat summary

Patch or workaround signal is available
4 mentions across 4 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 2 signals
Technical details provided in 3 signals
General: 2 classified signals
Disclosure: 1 classified signal
Peaked 3d ago at 1 mentions (2026-06-02); latest day: 1
4 total mentions across 4 days

Affected systems

Vendors

progress

Products

sitefinity

Deep dive

Activity timeline4 mentions / 4d

Signal classification3 categories

General

250.0%

Patch

125.0%

Disclosure

125.0%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-06-02	1	General1
2026-06-03	1	Patch1
2026-06-17	1	Disclosure1
2026-06-24	1	General1

Full discourse4 posts

CCB Alert@CCBalert136d
Patch
Warning: Multiple vulnerabilities in #Progress #Sitefinity CMS (CVE-2026-7312, CVE-2026-7198, CVE-2026-7195, CVE-2026-7201, CVE-2026-7313). Successful exploitation could lead to unauthorized access, information disclosure and privilege escalation. https://ccb.belgium.be/advisories/warning-multiple-critical-vulnerabilities-progress-sitefinity-patch-immediately #Patch
Post summary
Multiple critical CVEs affecting Progress Sitefinity CMS are disclosed, and users are urged to apply patches immediately to mitigate potential unauthorized access and privilege escalation.
01000202
7.2K followersView on X
ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker115d
General
CVE-2026-7201 Progress Sitefinity 15.2.x（15.2.8441未満）、15.3.x（15.3.8531未満）、15.4.x（15.4.8630未満）の脆弱性をわかりやすく解説｜影響範囲と対策まとめ https://www.cybernote.click/2026/06/17/cve-2026-7201-progress-sitefinity-152x1528441153x1538531154x1548630/ #IT #Security #cybersecurity
Post summary
The article offers an overview of CVE‑2026‑7201, explaining which Sitefinity versions are affected and summarizing mitigation strategies, but does not provide PoCs, exploits, or patch specifics.
0000035
208 followersView on X
ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker122d
Disclosure
CVE-2026-7201 Progress Sitefinity 15.2.x（15.2.8441未満）、15.3.x（15.3.8531未満）、15.4.x（15.4.8630未満）の脆弱性をわかりやすく解説｜影響範囲と対策まとめ https://www.cybernote.click/2026/06/17/cve-2026-7201-progress-sitefinity-152x1528441153x1538531154x1548630/ #IT #Security #cybersecurity
Post summary
The post provides an explanatory overview of CVE‑2026‑7201 impacting specific Sitefinity versions, highlights mitigation steps, but does not mention PoC, exploit code, or active exploitation.
0000042
209 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds137d
General
CVE-2026-7201 Authorization Bypass Through User-Controlled Key in Progre... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-7201 Don't wait vulnerability scanning results: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=2
Post summary
The tweet shares a link to vulnerability details for CVE‑2026‑7201, noting an authorization bypass via a user‑controlled key, but provides no PoC, exploit, patch, or active exploit information.
0000051
4.0K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	progress	sitefinity	-	-	-

Explore more

Back to dashboard progress CVEs sitefinity vulnerabilities

What researchers are saying

CVE-2026-7201

CCB Alert@CCBalertPatch

Multiple critical CVEs affecting Progress Sitefinity CMS are disclosed, and users are urged to apply patches immediately to mitigate potential unauthorized access and privilege escalation.

ケイ | IT・セキュリティ系副業Webライター@Teeeda_workerGeneral

The article offers an overview of CVE‑2026‑7201, explaining which Sitefinity versions are affected and summarizing mitigation strategies, but does not provide PoCs, exploits, or patch specifics.

ケイ | IT・セキュリティ系副業Webライター@Teeeda_workerDisclosure

The post provides an explanatory overview of CVE‑2026‑7201 impacting specific Sitefinity versions, highlights mitigation steps, but does not mention PoC, exploit code, or active exploitation.

Vulmon Vulnerability Feed@VulmonFeedsGeneral

The tweet shares a link to vulnerability details for CVE‑2026‑7201, noting an authorization bypass via a user‑controlled key, but provides no PoC, exploit, patch, or active exploit information.