CVE-2026-82486

MEDIUM 5.0

SiteServer SSCMS Agent Installation Workflow access control

CVSS Score

5.0

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability was found in SiteServer SSCMS 7.4.0. Affected by this issue is some unknown functionality of the component Agent Installation Workflow. Performing a manipulation of the argument SecurityKey results in improper access controls. Remote exploitation of the attack is possible. The attack is considered to have high complexity. The exploitation is known to be difficult. The project was informed of the problem early through an issue report but has not responded yet.

CWE	CWE-284 CWE-266
Vendor	siteserver
Product	sscms
Published	Aug 30, 2026

Stay Ahead of the Next One

Get instant alerts for siteserver sscms

Be the first to know when new medium vulnerabilities affecting siteserver sscms are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L/E:X/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

SiteServer / SSCMS

7.4.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/397036 vuldb.com: https://vuldb.com/vuln/397036/cti vuldb.com: https://vuldb.com/cve/CVE-2026-82486 vuldb.com: https://vuldb.com/submit/888366 github.com: https://github.com/siteserver/cms/issues/3898

Credits

🔍 mofeifei (VulDB User) VulDB CNA Team