Known vulnerabilities in Umbraco Umbraco CMS

Vendor: Umbraco
Website: https://umbraco.com
Total Security Bulletins: 34

Security bulletins (34)

Secuity bulletin Severity Status Published
SB2026051609: Multiple vulnerabilities in Umbraco CMS Medium
Patched
16.05.2026
SB20260505109: Multiple vulnerabilities in Umbraco CMS Low
Patched
05.05.2026
SB20260505108: Improper access control in Umbraco CMS Medium
Patched
05.05.2026
SB2025120920: Information disclosure in Umbraco CMS Low
Patched
09.12.2025
SB2025071721: Information disclosure in Umbraco CMS Medium
Patched
17.07.2025
SB2025060312: Arbitrary file upload in Umbraco CMS Medium
Patched
03.06.2025
SB2025050613: Information disclosure in Umbraco CMS Medium
Patched
06.05.2025
SB2025040899: Relative Path Traversal in Umbraco CMS Medium
Patched
08.04.2025
SB2025032415: Improper Authorization in Umbraco CMS Low
Patched
24.03.2025
SB2025032414: Improper Authorization in Umbraco CMS Medium
Patched
24.03.2025
SB2025012263: Multiple vulnerabilities in Umbraco CMS Medium
Patched Public exploit
22.01.2025
SB2024102321: Stored XSS in Umbraco CMS Low
Not patched
23.10.2024
SB2024102319: Improper access control in Umbraco CMS Low
Patched
23.10.2024
SB20241022351: Multiple vulnerabilities in Umbraco CMS Low
Patched
22.10.2024
SB2024082034: Multiple vulnerabilities in Umbraco CMS Medium
Patched
20.08.2024
SB2024060303: Stored cross-site scripting in Umbraco CMS Low
Patched
03.06.2024
SB2024060302: Open redirect in Umbraco CMS Medium
Patched
03.06.2024
SB20240417161: Improper access control in Umbraco CMS Low
Patched
17.04.2024
SB2024032131: Observable Response Discrepancy in Umbraco CMS Low
Patched
21.03.2024
SB2023121359: Improper access control in Umbraco CMS Low
Patched
13.12.2023


Showing elements 1 - 20 out of 34