# cve.now: Umbraco

The newest entries naming Umbraco as an affected vendor (up to 200), of 52 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-117553](https://cve.now/CVE-2026-117553.md): Umbraco CMS before 17.7.2 and 18.2.2 Account Takeover via Host Header Poisoning (CVSS 7.7)
- [CVE-2026-111624](https://cve.now/CVE-2026-111624.md): Umbraco CMS before 17.7.1 and 18.2.1 Missing Authorization on SignalR Hubs (CVSS 6.3)
- [CVE-2026-69197](https://cve.now/CVE-2026-69197.md): Umbraco: Delivery API leaks protected (Public Access) content through Content Picker / Multi-Node Tree Picker expansion (CVSS 8.7)
- [CVE-2026-46609](https://cve.now/CVE-2026-46609.md): Umbraco.Cms: XSS/HTML Injection in Umbraco Backoffice confirmation dialog (CVSS 4.6)
- [CVE-2026-46616](https://cve.now/CVE-2026-46616.md): Umbraco.Cms: Open Redirect Vulnerability in Surface Controllers (CVSS 5.4)
- [CVE-2026-31834](https://cve.now/CVE-2026-31834.md): Umbraco Affected by Vertical Privilege Escalation via Missing Authorization Checks (CVSS 7.2)
- [CVE-2026-31833](https://cve.now/CVE-2026-31833.md): Umbraco has Stored XSS in UFM Rendering Pipeline via Permissive DOMPurify Attribute Filtering (CVSS 6.7)
- [CVE-2026-31832](https://cve.now/CVE-2026-31832.md): Umbraco Backoffice API Allows Unauthorized Modification of Domain Data (CVSS 5.4)
- [CVE-2026-27449](https://cve.now/CVE-2026-27449.md): Umbraco.Engage.Forms Allows Unauthorized Access to Multiple API Endpoints (CVSS 7.5)
- [CVE-2026-24687](https://cve.now/CVE-2026-24687.md): Umbraco.Forms has path traversal and file enumeration vulnerability in Linux/Mac (CVSS 6.0)
- [CVE-2025-68924](https://cve.now/CVE-2025-68924.md): In Umbraco UmbracoForms through 8.13.16, an authenticated attacker can supply a malicious WSDL (aka Webservice) URL as a data source for rem (CVSS 7.5)
- [CVE-2021-47776](https://cve.now/CVE-2021-47776.md): Umbraco v8.14.1 - 'baseUrl' SSRF (CVSS 6.9)
- [CVE-2025-66625](https://cve.now/CVE-2025-66625.md): Umbraco Vulnerable to Improper File Access and Credential Exposure through Dictionary Import Functionality (CVSS 4.9)
- [CVE-2012-10054](https://cve.now/CVE-2012-10054.md): Umbraco CMS \< 4.7.1 codeEditorSave.asmx RCE (CVSS 9.3)
- [CVE-2025-54425](https://cve.now/CVE-2025-54425.md): Umbraco's Delivery API allows for cached requests to be returned with an invalid API key (CVSS 5.3)
- [CVE-2025-49147](https://cve.now/CVE-2025-49147.md): Umbraco.Cms Vulnerable to Disclosure of Configured Password Requirements (CVSS 5.3)
- [CVE-2025-48953](https://cve.now/CVE-2025-48953.md): Umbraco Vulnerable to By-Pass of Configured Allowed Extensions for File Uploads (CVSS 5.5)
- [CVE-2025-47280](https://cve.now/CVE-2025-47280.md): Umbraco.Forms has HTML injection vulnerability in 'Send email' workflow (CVSS 2.3)
- [CVE-2025-46736](https://cve.now/CVE-2025-46736.md): Umbraco Makes User Enumeration Feasible Based on Timing of Login Response (CVSS 5.3)
- [CVE-2025-32017](https://cve.now/CVE-2025-32017.md): Umbraco has a Management API Vulnerability to Path Traversal With Authenticated Users (CVSS 8.8)
- [CVE-2025-27602](https://cve.now/CVE-2025-27602.md): Umbraco Allows a Restricted Editor User to Delete Media Item or Access Unauthorized Content (CVSS 4.9)
- [CVE-2025-27601](https://cve.now/CVE-2025-27601.md): Umbraco Allows Improper API Access Control to Low-Privilege Users to Data Type Functionality (CVSS 4.3)
- [CVE-2025-24012](https://cve.now/CVE-2025-24012.md): Umbraco Backoffice Components Have XSS/HTML Injection Vulnerability (CVSS 4.6)
- [CVE-2025-24011](https://cve.now/CVE-2025-24011.md): Umbraco CMS Vulnerable to User Enumeration Feasible Based On Management API Timing and Response Codes (CVSS 5.3)
- [CVE-2025-23041](https://cve.now/CVE-2025-23041.md): Short and Long Answer Fields Are Not Validated Server-Side For Maximum Length in Umbraco.Forms (CVSS 5.8)
- [CVE-2024-10761](https://cve.now/CVE-2024-10761.md): Umbraco CMS Dashboard frame cross site scripting (CVSS 6.9)
- [CVE-2024-48929](https://cve.now/CVE-2024-48929.md): Umbraco CMS Has Incomplete Server Termination During Explicit Sign-Out (CVSS 4.2)
- [CVE-2024-48927](https://cve.now/CVE-2024-48927.md): Potential Code Execution Risk When Viewing SVG Files in Full Screen in Backoffice (CVSS 4.6)
- [CVE-2024-48926](https://cve.now/CVE-2024-48926.md): Umbraco CMS logout page displayed before session expiration (CVSS 4.2)
- [CVE-2024-48925](https://cve.now/CVE-2024-48925.md): Umbraco CMS Improper Access Control Vulnerability Allows Low-Privilege Users to Access Webhook API (CVSS 0.0)
- [CVE-2024-47819](https://cve.now/CVE-2024-47819.md): Umbraco CMS vulnerable to stored Cross-site Scripting in the "dictionary name" on Dictionary section (CVSS 4.2)
- [CVE-2024-43377](https://cve.now/CVE-2024-43377.md): Umbraco CMS Improper Access Control vulnerability (CVSS 5.4)
- [CVE-2024-43376](https://cve.now/CVE-2024-43376.md): Umbraco CMS vulnerable to Generation of Error Message Containing Sensitive Information (CVSS 4.3)
- [CVE-2024-35240](https://cve.now/CVE-2024-35240.md): Stored Cross-site Scripting on Print Functionality in Umbraco Commerce (CVSS 5.4)
- [CVE-2024-35239](https://cve.now/CVE-2024-35239.md): Stored Cross-site Scripting on Components of Umbraco Forms (CVSS 2.7)
- [CVE-2024-35218](https://cve.now/CVE-2024-35218.md): Umbraco CMS Vulnerable to Stored XSS on Content Page Through Markdown Editor Preview Pane (CVSS 4.2)
- [CVE-2024-34071](https://cve.now/CVE-2024-34071.md): Open Redirect Bypass Protection (CVSS 6.1)
- [CVE-2024-32872](https://cve.now/CVE-2024-32872.md): Umbraco Workflow's Backoffice users can execute arbitrary SQL (CVSS 5.5)
- [CVE-2024-29035](https://cve.now/CVE-2024-29035.md): Umbraco's Blind SSRF Leads to Port Scan by using Webhooks (CVSS 4.1)
- [CVE-2024-28868](https://cve.now/CVE-2024-28868.md): Umbraco possible user enumeration vulnerability (CVSS 3.7)
- [CVE-2023-49279](https://cve.now/CVE-2023-49279.md): Umbraco CMS vulnerable to stored XSS via SVG File Upload (CVSS 3.7)
- [CVE-2023-49278](https://cve.now/CVE-2023-49278.md): Umbraco CMS brute force exploit can be used to collect valid usernames (CVSS 5.3)
- [CVE-2023-49274](https://cve.now/CVE-2023-49274.md): Umbraco CMS SMTP misconfiguration exposes potential registered user email (CVSS 3.7)
- [CVE-2023-49273](https://cve.now/CVE-2023-49273.md): Umbraco CMS vulnerable to Privilege Escalation using Spoofing (CVSS 5.4)
- [CVE-2023-49089](https://cve.now/CVE-2023-49089.md): Umbraco CMS possible path traversal when creating packages from backoffice (CVSS 7.7)
- [CVE-2023-48313](https://cve.now/CVE-2023-48313.md): Umbraco contains a DOM-XSS (CVSS 4.3)
- [CVE-2023-48227](https://cve.now/CVE-2023-48227.md): Umbraco CMS Backoffice User can bypass "Publish" restriction (CVSS 4.3)
- [CVE-2023-38694](https://cve.now/CVE-2023-38694.md): Umbraco CMS vulnerable to possible injection of HTML in an unintended form (CVSS 3.5)
- [CVE-2023-37267](https://cve.now/CVE-2023-37267.md): Umbraco allows possible Admin-level access to backoffice without Auth under rare conditions (CVSS 7.5)
- [CVE-2023-32312](https://cve.now/CVE-2023-32312.md): Client secret not mandatory in UmbracoIdentityExtensions (CVSS 3.7)
- [CVE-2022-22690](https://cve.now/CVE-2022-22690.md): Umbraco Remote ApplicationURL Overwrite (CVSS 8.6)
- [CVE-2022-22691](https://cve.now/CVE-2022-22691.md): Umbraco Password Reset URL Poison (CVSS 6.8)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/umbraco
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.