A vulnerability was found in SiteServer SSCMS 7.4.0. (CVE-2026-82486)

SiteServer SSCMS version 7.4.0 contains a vulnerability in an unspecified function within the Agent Installation Workflow component. The issue arises from improper access control when the SecurityKey argument is manipulated. This flaw allows remote attackers to potentially bypass access restrictions. The attack complexity is high, making exploitation difficult. The vulnerability is tracked as CVE-2026-82486 and is associated with CWE-266 (Improper Access Control). There is no known patch or vendor advisory at this time, and no known exploits in the wild have been reported.

The vulnerability could allow remote attackers to bypass access controls by manipulating the SecurityKey argument, potentially leading to limited confidentiality, integrity, and availability impacts. However, the attack complexity is high, and no known exploitation in the wild has been reported, indicating a lower immediate risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or vendor response is available, monitor for updates from the vendor and apply any future patches promptly.