Browse CVEs

MEDIUM 6.1 CVE-2026-46616 Umbraco is an ASP.NET CMS. Prior to versions 13.14.0 and 17.4.0, some of the Surface Controllers in the CMS provide to support member related operati… Umbraco Cms 13.14.0 / 17.4.0+ Fix from $1,6002026-06-10 HIGH 7.2 CVE-2026-31834 Umbraco is an ASP.NET CMS. From 15.3.1 to before 16.5.1 and 17.2.2, A privilege escalation vulnerability has been identified in Umbraco CMS. Under ce… Umbraco Cms 16.5.1 / 17.2.2+ Fix from $1,9502026-03-10 MEDIUM 6.7 CVE-2026-31833 Umbraco is an ASP.NET CMS. From 16.2.0 to before 16.5.1 and 17.2.2, An authenticated backoffice user with access to Settings can inject malicious HTM… Umbraco Cms 16.5.1 / 17.2.2+ Fix from $1,6002026-03-10 MEDIUM 5.4 CVE-2026-31832 Umbraco is an ASP.NET CMS. From 14.0.0 to before 16.5.1 and 17.2.2, A broken object-level authorization vulnerability exists in a backoffice API endp… Umbraco Cms 16.5.1 / 17.2.2+ Fix from $1,6002026-03-10 MEDIUM 6.5 CVE-2026-24687 Umbraco Forms is a form builder that integrates with the Umbraco content management system. It's possible for an authenticated backoffice-user to enu… Umbraco Forms 16.4.1 / 17.1.1+ Fix from $1,6002026-01-29 HIGH 7.5 CVE-2025-68924 In Umbraco UmbracoForms through 8.13.16, an authenticated attacker can supply a malicious WSDL (aka Webservice) URL as a data source for remote code … Umbraco Forms after 8.13.16 Fix from $1,9502026-01-16 MEDIUM 5.3 CVE-2021-47776 Umbraco CMS v8.14.1 contains a server-side request forgery vulnerability that allows attackers to manipulate baseUrl parameters in multiple dashboard… Umbraco Cms No fix yet Fix from $1,6002026-01-15 CRITICAL 10.0 CVE-2025-67288 An arbitrary file upload vulnerability in Umbraco CMS v16.3.3 allows attackers to execute arbitrary code by uploading a crafted PDF file. NOTE: this … Umbraco Cms Mitigation only Fix from $2,3002025-12-22 CRITICAL 9.8 CVE-2012-10054 Umbraco CMS versions prior to 4.7.1 are vulnerable to unauthenticated remote code execution via the codeEditorSave.asmx SOAP endpoint, which exposes … Umbraco Cms 4.7.1+ Fix from $2,3002025-08-13 MEDIUM 5.3 CVE-2025-54425 Umbraco is an ASP.NET CMS. In versions 13.0.0 through 13.9.2, 15.0.0 through 15.4.1 and 16.0.0 through 16.1.0, the content delivery API can be restri… Umbraco Cms 13.9.3 / 15.4.4+ Fix from $1,6002025-07-30 MEDIUM 5.3 CVE-2025-49147 Umbraco, a free and open source .NET content management system, has a vulnerability in versions 10.0.0 through 10.8.10 and 13.0.0 through 13.9.1. Via… Umbraco Cms 10.8.11 / 13.9.2+ Fix from $1,6002025-06-24 MEDIUM 6.5 CVE-2025-48953 Umbraco is an ASP.NET content management system (CMS). Starting in version 14.0.0 and prior to versions 15.4.2 and 16.0.0, it's possible to upload a … Umbraco Cms 15.4.2+ Fix from $1,6002025-06-03 MEDIUM 6.1 CVE-2025-47280 Umbraco Forms is a form builder that integrates with the Umbraco content management system. Starting in the 7.x branch and prior to versions 13.4.2 a… Umbraco Forms 13.4.2 / 15.1.2+ Fix from $1,6002025-05-13 MEDIUM 5.3 CVE-2025-46736 Umbraco is a free and open source .NET content management system. Prior to versions 10.8.10 and 13.8.1, based on an analysis of the timing of post lo… Umbraco Cms 10.8.10 / 13.8.1+ Fix from $1,6002025-05-06 HIGH 8.8 CVE-2025-32017 Umbraco is a free and open source .NET content management system. Authenticated users to the Umbraco backoffice are able to craft management API requ… Umbraco Cms 14.3.4 / 15.3.1+ Fix from $1,9502025-04-08 MEDIUM 6.4 CVE-2025-27602 Umbraco is a free and open source .NET content management system. In versions of Umbraco's web backoffice program prior to versions 10.8.9 and 13.7.1… Umbraco Cms 10.8.9 / 13.7.1+ Fix from $1,6002025-03-11 MEDIUM 6.5 CVE-2024-55488 A stored cross-site scripting (XSS) vulnerability in Umbraco CMS v14.3.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payl… Umbraco Cms No fix yet Fix from $1,6002025-01-22 MEDIUM 5.4 CVE-2025-24012 Umbraco is a free and open source .NET content management system. Starting in version 14.0.0 and prior to versions 14.3.2 and 15.1.2, authenticated u… Umbraco Cms 14.3.2 / 15.1.2+ Fix from $1,6002025-01-21 MEDIUM 5.3 CVE-2025-24011 Umbraco is a free and open source .NET content management system. Starting in version 14.0.0 and prior to versions 14.3.2 and 15.1.2, it's possible t… Umbraco Cms 14.3.2 / 15.1.2+ Fix from $1,6002025-01-21 MEDIUM 5.3 CVE-2025-23041 Umbraco.Forms is a web form framework written for the nuget ecosystem. Character limits configured by editors for short and long answer fields are va… Umbraco Forms 8.13.15 / 10.5.7+ Fix from $1,6002025-01-14 HIGH 8.7 CVE-2024-47819 Umbraco, a free and open source .NET content management system, has a cross-site scripting vulnerability starting in version 14.0.0 and prior to vers… Umbraco Cms 14.3.1+ Fix from $1,9502024-10-22 MEDIUM 6.5 CVE-2024-48925 Umbraco, a free and open source .NET content management system, has an improper access control issue starting in version 14.0.0 and prior to version … Umbraco Cms 14.3.0+ Fix from $1,6002024-10-22 MEDIUM 5.3 CVE-2024-43376 Umbraco is an ASP.NET CMS. Some endpoints in the Management API can return stack trace information, even when Umbraco is not in debug mode. This vuln… Umbraco Cms 14.1.2+ Fix from $1,6002024-08-20 MEDIUM 5.4 CVE-2024-35239 Umbraco Commerce is an open source dotnet web forms solution. In affected versions an authenticated user that has access to edit Forms may inject uns… Umbraco Forms 8.13.13 / 10.5.3+ Fix from $1,6002024-05-28 MEDIUM 6.1 CVE-2024-34071 Umbraco is an ASP.NET CMS used by more than 730.000 websites. Umbraco has an endpoint that is vulnerable to open redirects. The endpoint is protected… Umbraco Cms 8.18.14 / 10.8.6+ Fix from $1,6002024-05-21 MEDIUM 5.3 CVE-2024-29035 Umbraco is an ASP.NET CMS. Failing webhooks logs are available when solution is not in debug mode. Those logs can contain information that is critica… Umbraco Cms 13.1.1+ Fix from $1,6002024-04-17 MEDIUM 5.3 CVE-2024-28868 Umbraco is an ASP.NET content management system. Umbraco 10 prior to 10.8.4 with access to the native login screen is vulnerable to a possible user e… Umbraco Cms 10.8.5+ Fix from $1,6002024-03-20 MEDIUM 5.4 CVE-2023-49279 Umbraco is an ASP.NET content management system (CMS). Starting in version 7.0.0 and prior to versions 7.15.11, 8.18.9, 10.7.0, 11.5.0, and 12.2.0, a… Umbraco Cms 7.15.11 / 8.18.9+ Fix from $1,6002023-12-12 MEDIUM 5.3 CVE-2023-49278 Umbraco is an ASP.NET content management system (CMS). Starting in version 8.0.0 and prior to versions 8.18.10, 10.8.1, and 12.3.4, a brute force exp… Umbraco Cms 8.18.10 / 10.8.1+ Fix from $1,6002023-12-12 MEDIUM 5.3 CVE-2023-49274 Umbraco is an ASP.NET content management system (CMS). Starting in version 8.0.0 and prior to versions 8.18.10, 10.8.1, and 12.3.4, a user enumeratio… Umbraco Cms 8.18.10 / 10.8.1+ Fix from $1,6002023-12-12