Advisories · Technology

Umbraco-CMS.

Every CVE that names Umbraco-CMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-117553 CVE record

CVSS 7.7 High

Umbraco CMS before 17.7.2 and 18.2.2 Account Takeover via Host Header Poisoning
- Umbraco-CMS
- Open redirect
Not analysed yet 27 Oct 2026
CVE-2026-111624 CVE record

CVSS 6.3 Medium

Umbraco CMS before 17.7.1 and 18.2.1 Missing Authorization on SignalR Hubs
- Umbraco-CMS
- Authentication bypass
Not analysed yet 16 Oct 2026
CVE-2012-10054 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Umbraco CMS < 4.7.1 codeEditorSave.asmx RCE
- Umbraco CMS
- Path traversal
- Unrestricted file upload
Not analysed yet 13 Aug 2025
CVE-2020-5810 CVE record

A stored XSS vulnerability exists in Umbraco CMS <= 8.9.1 or current.
- Umbraco CMS
Not analysed yet 30 Dec 2020