Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
CVE-2026-69197
  • github.com/umbraco/umbraco-cms
 Umbraco: Delivery API leaks protected (Public Access) content through Content Picker / Multi-Node Tree Picker expansion 17 Sep
  • Fix available
  • Severity - 8.7 (High)
CVE-2026-46609
  • github.com/umbraco/umbraco-cms
 Umbraco.Cms: XSS/HTML Injection in Umbraco Backoffice confirmation dialog 10 Jun
  • Fix available
  • Severity - 4.6 (Medium)
CVE-2026-46616
  • github.com/umbraco/umbraco-cms
 Umbraco.Cms: Open Redirect Vulnerability in Surface Controllers 10 Jun
  • Fix available
  • Severity - 5.4 (Medium)
CVE-2026-31834
  • github.com/umbraco/umbraco-cms
 Umbraco Affected by Vertical Privilege Escalation via Missing Authorization Checks 10 Mar
  • Fix available
  • Severity - 7.2 (High)
CVE-2026-31833
  • github.com/umbraco/umbraco-cms
 Umbraco has Stored XSS in UFM Rendering Pipeline via Permissive DOMPurify Attribute Filtering 10 Mar
  • Fix available
  • Severity - 6.7 (Medium)
CVE-2026-31832
  • github.com/umbraco/umbraco-cms
 Umbraco Backoffice API Allows Unauthorized Modification of Domain Data 10 Mar
  • Fix available
  • Severity - 5.4 (Medium)
CVE-2021-47776
  • github.com/umbraco/umbraco-cms
 See record for full details 15 Jan
  • No fix available
  • Severity - 6.9 (Medium)
CVE-2025-67288
  • github.com/umbraco/umbraco-cms
 See record for full details 22 Dec 2025
  • No fix available
  • Severity - 10.0 (Critical)
CVE-2025-66625
  • github.com/umbraco/umbraco-cms
 Umbraco Vulnerable to Improper File Access and Credential Exposure through Dictionary Import Functionality 09 Dec 2025
  • Fix available
  • Severity - 4.9 (Medium)
CVE-2025-54425
  • github.com/umbraco/umbraco-cms
 Umbraco's Delivery API allows for cached requests to be returned with an invalid API key 30 Jul 2025
  • Fix available
  • Severity - 5.3 (Medium)
CVE-2025-49147
  • github.com/umbraco/umbraco-cms
 Umbraco.Cms Vulnerable to Disclosure of Configured Password Requirements 24 Jun 2025
  • Fix available
  • Severity - 5.3 (Medium)
CVE-2025-48953
  • github.com/umbraco/umbraco-cms
 Umbraco Vulnerable to By-Pass of Configured Allowed Extensions for File Uploads 03 Jun 2025
  • Fix available
  • Severity - 5.5 (Medium)
CVE-2025-46736
  • github.com/umbraco/umbraco-cms
 Umbraco Makes User Enumeration Feasible Based on Timing of Login Response 06 May 2025
  • Fix available
  • Severity - 5.3 (Medium)
CVE-2025-32017
  • github.com/umbraco/umbraco-cms
 Umbraco has a Management API Vulnerability to Path Traversal With Authenticated Users 08 Apr 2025
  • Fix available
  • Severity - 8.8 (High)
CVE-2025-27602
  • github.com/umbraco/umbraco-cms
 Umbraco Allows a Restricted Editor User to Delete Media Item or Access Unauthorized Content 11 Mar 2025
  • Fix available
  • Severity - 4.9 (Medium)
CVE-2025-27601
  • github.com/umbraco/umbraco-cms
 Umbraco Allows Improper API Access Control to Low-Privilege Users to Data Type Functionality 11 Mar 2025
  • Fix available
  • Severity - 4.3 (Medium)
Load more...