Advisories · Technology

SiteServer SSCMS.

Every CVE that names SiteServer SSCMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-126993 CVE record

CVSS 6.9 Medium

SiteServer SSCMS captcha inadequate encryption
- SiteServer SSCMS
- Weak cryptography or TLS
- CWE-310
Not analysed yet 12 Nov 2026
CVE-2026-124575 CVE record

CVSS 6.3 Medium

SiteServer SSCMS Admin-Login CAPTCHA LoginController.Submit.cs LoginController.Submit excessive authentication
- SiteServer SSCMS
- Authentication bypass
- CWE-799
Not analysed yet 9 Nov 2026
CVE-2026-111658 CVE record

CVSS 5.1 Medium

SiteServer SSCMS through 7.4.0 Cross-Site Authorization Bypass via Channels API
- SiteServer SSCMS
- Broken access control
Not analysed yet 16 Oct 2026
CVE-2026-82486 CVE record

CVSS 2.3 Low

SiteServer SSCMS Agent Installation Workflow access control
- SiteServer SSCMS
- Privilege escalation
- Broken access control
Not analysed yet 30 Aug 2026
CVE-2026-7435 CVE record

CVSS 8.6 High

SSCMS v7.4.0 SQL Injection via stl:sqlContent queryString
- siteserver SSCMS
- SQL injection
Not analysed yet 30 Apr 2026
CVE-2026-7429 CVE record

CVSS 2.1 Low

SSCMS v7.4.0 Reflected Cross-Site Scripting via STL Processing
- siteserver SSCMS
- Cross-site scripting (XSS)
Not analysed yet 30 Apr 2026