Product by Progress Software

    Sitefinity

    6 known vulnerabilities in Sitefinity (Progress Software), 0 of them actively exploited (CISA KEV).

    Key figures

    6

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Sitefinity (Progress Software)
    CriticalCVE-2026-7312

    CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity

    also in 1 other product

    		10.0
    CriticalCVE-2026-7198

    CWE-284: Improper Access Control in web services in Progress Sitefinity

    also in 1 other product

    		9.8
    HighCVE-2026-92931

    CWE-918: Server-Side Request Forgery in the Progress Sitefinity Next.js Renderer SDK

    		8.8
    HighCVE-2026-7195

    CWE-20: Improper Input Validation in web services in Progress Sitefinity

    also in 1 other product

    		8.8
    HighCVE-2026-7201

    CWE-639: Authorization Bypass Through User-Controlled Key in web services in Progress Sitefinity

    also in 1 other product

    		8.8
    HighCVE-2026-7313

    CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity

    also in 1 other product

    		8.7

    News

    All products by Progress Software