CVE-2026-7201

Name of the Vulnerable Software and Affected Versions Progress Sitefinity versions 15.2.x through 15.2.8440 Progress Sitefinity versions 15.3.x through 15.3.8530 Progress Sitefinity versions 15.4.x through 15.4.8629

Description An authorization bypass exists in web services where a user-controlled key can be manipulated. This allows a remote authenticated attacker to modify account properties of other users, which could potentially lead to account compromise. Successful exploitation requires knowledge of specific values that are typically not exposed to low-privileged users.

Recommendations Update versions 15.2.x to 15.2.8441. Update versions 15.3.x to 15.3.8531. Update versions 15.4.x to 15.4.8630.