CYBERHAWK / CVE / CVE-2026-7312

CVE-2026-7312

Progress Sitefinity

CRITICAL CVSS 10.0 vibe

The flaw

Insufficiently protected credentials allows remote attacker to obtain plaintext credentials.

What to do

Update to Sitefinity version 15.4.8631 or later

▸ Scan my repo for CVE-2026-7312

References

First seen 2026-06-05 · Tracked by PickBits CyberHawk · Weekly CVE digest