CVE-2026-7198
CRITICAL
NVD
CVSS Score
9.8
Severity
CRITICAL
Published
Jun 02, 2026
Vendor
unknown
Description
CWE-284: Improper Access Control in web services in Progress Sitefinity 15.4.8623 before 15.4.8630 allows a remote unauthenticated attacker to access content that should be restricted, resulting in full compromise of confidentiality, integrity, and availability of affected installations.