CVE-2026-7313: Progress Sitefinity

Medium severity, CVSS 4.9. EPSS: 0.5% chance of exploitation in the next 30 days.

CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity version from 8.0.5700 to 13.3.7652 allows a remote authenticated attacker to obtain plain-text credentials used connect to Sitefinity Insight service. Successful exploitation requires active integration with Sitefinity Insight, non-default site configuration and valid back-end authorization.

Affected products

• Progress Sitefinity: from 8.0.5700, before 13.3.7652 (fixed in 13.3.7652)

Published 2026-06-02. Last modified 2026-07-22.