CVE-2026-82228: CWE-290 Authentication Bypass by Spoofing in SiteGround SiteGround Security

CVE-2026-82228 is a CWE-290 authentication bypass vulnerability in SiteGround Security plugin versions <= 1.6.6. It enables unauthenticated attackers to bypass authentication mechanisms by spoofing, which can result in complete compromise of the system's confidentiality, integrity, and availability. The vulnerability is publicly disclosed but lacks an official fix or patch as of the publication date. The attack complexity is high, and no privileges or user interaction are required for exploitation.

Successful exploitation of this vulnerability allows an unauthenticated attacker to bypass authentication controls, potentially gaining unauthorized access to sensitive functionality or data within SiteGround Security. This can lead to full compromise of confidentiality, integrity, and availability of the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. No specific temporary mitigations are provided by the vendor at this time.