CVE-2026-7195: CWE-20: Improper Input Validation in web services in Progress Sitefinity
Progress Software · Sitefinity
Vendor fix available · Affected: Progress Software Sitefinity · Exploitation: unlikely (under 1%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 38% of scored CVEs
DescriptionCVE.org
CWE-20: Improper Input Validation in web services in Progress Sitefinity 14.1.x through 14.3.x, 14.4.x before 14.4.8152, 15.0.x before 15.0.8234, 15.1.x before 15.1.8335, 15.2.x before 15.2.8441, 15.3.x before 15.3.8531, and 15.4.x before 15.4.8630 allows a remote unauthenticated attacker to compromise the integrity and confidentiality of user accounts. Successful exploitation requires user interaction and a non-default site configuration.
Affected products1
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- Progress Software · Sitefinityfrom 14.1.0 before 14.4.0; from 14.4.8100 before 14.4.8152; from 15.0.8200 before 15.0.8234; from 15.1.8300 before 15.1.8335; from 15.2.8400 before 15.2.8441; from 15.3.8500 before 15.3.8531 and 1 more
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Unlikely (under 1%). EPSS under 1%, or no score yet.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Vendor
- Progress Software
- Published
- June 2026
CoverageNo articles yet
No CyberSIXT article names CVE-2026-7195 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.