CVE-2026-7198 is an improper access control vulnerability in Progress Sitefinity web services affecting versions 15.4.8623 before 15.4.8630. The vulnerability allows remote unauthenticated attackers to access restricted content, resulting in complete compromise of confidentiality, integrity, and availability. This is classified as CWE-284 and appears to be part of a broader security advisory addressing multiple CVEs in Sitefinity. The vulnerability poses a critical risk due to the potential for full system compromise without authentication requirements.