CVE-2026-31832

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-31832
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-31832.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-31832
Aliases
Published
2026-03-10T21:49:54Z
Modified
2026-08-12T03:51:30Z
Severity
  • 5.4 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L CVSS Calculator
Summary
Umbraco Backoffice API Allows Unauthorized Modification of Domain Data
Details

Umbraco is an ASP.NET CMS. From 14.0.0 to before 16.5.1 and 17.2.2, A broken object-level authorization vulnerability exists in a backoffice API endpoint that allows authenticated users to assign domain-related data to content nodes without proper authorization checks. The issue is caused by insufficient authorization enforcement on the affected API endpoint, whereby via an API call, domains can be set on content nodes that the editor does not have permission to access (either via user group privileges or start nodes). This vulnerability is fixed in 16.5.1 and 17.2.2.

Database specific 
{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-639"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/31xxx/CVE-2026-31832.json"
}
References

Affected packages

Git / github.com/umbraco/umbraco-cms

Affected ranges

Type
GIT
Repo
https://github.com/umbraco/umbraco-cms
Events
Introduced
8685c7d64a1c597983cfb82e1bd1d269d22e4508
Fixed
8555a97b399e2a26379804ce753ee74bfa48b09e
Introduced
da502e06ae836057de372c7c2ed69a1221c3d3b4
Fixed
11a412c0fd89c70af2fa76dd3478a3e8024dfeb2
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:umbraco:umbraco_cms:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "14.0.0"
        },
        {
            "fixed": "16.5.1"
        },
        {
            "introduced": "17.0.0"
        },
        {
            "fixed": "17.2.2"
        }
    ],
    "source": "CPE_RANGE"
}

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-31832.json"