CVE-2026-124575 in SSCMS
Prediction
by VulDB Data Team • 11/08/2026
A vulnerability was identified in <a href="/product/siteserver:sscms">SiteServer SSCMS up to 7.1.3/7.2.1/7.4.0</a>. This issue affects the function <code>LoginController.Submit</code> of the file <em>src/SSCMS.Web/Controllers/Admin/LoginController.Submit.cs</em> of the component <em>Admin-Login CAPTCHA</em>. Such manipulation of the argument <em>isForceLogoutAndLogin</em> leads to improper restriction of excessive authentication attempts. It is possible to launch the attack remotely. The name of the patch is <em>df3becb7ebb00a48435418a44fd08a459eb38ace</em>. Applying a patch is advised to resolve this issue.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.