What’s Vulnerable › Products

siteserver SSCMS vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your siteserver SSCMS version is affected

Latest siteserver SSCMS vulnerabilities

• CVE-2026-111658 — SiteServer SSCMS through 7.4.0 Cross-Site Authorization Bypass via Channels API (CVSS 3.8)
• CVE-2026-82486 — SiteServer SSCMS Agent Installation Workflow access control (CVSS 5.0)
• CVE-2026-7435 — SSCMS v7.4.0 SQL Injection via stl:sqlContent queryString (CVSS 7.2)
• CVE-2026-7429 — SSCMS v7.4.0 Reflected Cross-Site Scripting via STL Processing (CVSS 4.6)