Technology · NuGet
Umbraco.Cms (NuGet) vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 29 vulnerabilities in Umbraco.Cms (NuGet): 0 in the last 7 days and 1 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2026-69197, was published on 17 September 2026. Nothing in the last four weeks, down from 1 vulnerability in the four before.
- Last 7 days
- 0
- Last 90 days
- 1
- Critical, all time
- 1
- Exploited in the wild
- 0
About Umbraco.Cms (NuGet)
An open-source content management system built on the .NET platform.
Latest Umbraco.Cms (NuGet) vulnerabilities
- CVE-2026-69197: Umbraco Delivery API authorization bypass in content reference expansionhighCVSS 4EPSS 0.7%
- CVE-2026-46616: Umbraco CMS open redirect in member Surface ControllersmediumCVSS 5.4EPSS 0.3%
- CVE-2026-46609: Umbraco CMS HTML injection in Backoffice confirmation dialogmediumCVSS 4.6EPSS 0.2%
- CVE-2026-31834: Umbraco Affected by Vertical Privilege Escalation via Missing Authorization CheckslowCVSS 3.1EPSS 0.5%
- CVE-2026-31833: Umbraco has Stored XSS in UFM Rendering Pipeline via Permissive DOMPurify Attribute FilteringlowCVSS 3.1EPSS 0.4%
- CVE-2026-31832: Umbraco Backoffice API Allows Unauthorized Modification of Domain DatalowCVSS 3.1EPSS 0.3%
- CVE-2025-67288: Umbraco CMS arbitrary file upload in PDF processingcriticalCVSS 10EPSS 0.5%
- CVE-2025-66625: Umbraco Vulnerable to Improper File Access and Credential Exposure in Dictionary Import FunctionalitymediumCVSS 4.9EPSS 0.4%
- CVE-2025-49147: Umbraco CMS disclosure of configured password requirementslowCVSS 3.1EPSS 0.3%
- CVE-2025-48953: Umbraco Vulnerable to By-Pass of Configured Allowed Extensions for File UploadslowCVSS 3.1EPSS 0.2%
- CVE-2025-46736: Umbraco Makes User Enumeration Feasible Based on Timing of Login ResponselowCVSS 3.1EPSS 0.4%
- CVE-2025-32017: Umbraco has a Management API Vulnerability to Path Traversal With Authenticated UserslowCVSS 3.1EPSS 0.6%
- CVE-2024-10761: XSS/HTML Injection Vulnerability in Umbraco Preview BadgelowCVSS 3.1EPSS 0.6%
- CVE-2025-24011: Umbraco Allows User Enumeration Feasible Based On Management API Timing and Response CodeslowCVSS 3.1EPSS 1.5%
- CVE-2024-48929: Umbraco CMS Has Incomplete Server Termination During Explicit Sign-OutlowCVSS 3.1EPSS 0.3%
- CVE-2024-48927: Umbraco has a Potential Code Execution Risk When Viewing SVG Files in Full Screen in BackofficelowCVSS 3.1EPSS 0.4%
- CVE-2024-48926: Umbraco CMS logout page displayed before session expirationlowCVSS 3.1EPSS 0.3%
- CVE-2024-48925: Umbraco CMS Improper Access Control Vulnerability Allows Low-Privilege Users to Access Webhook APIlowCVSS 3.1EPSS 0.4%
- CVE-2024-43377: Umbraco CMS Improper Access Control vulnerabilitylowCVSS 3.1EPSS 0.2%
- CVE-2023-49279: Stored XSS via SVG File UploadlowCVSS 3.1EPSS 0.4%
- CVE-2023-49278: Brute force exploit can be used to collect valid usernameslowCVSS 3.1EPSS 0.5%
- CVE-2023-49274: SMTP misconfiguration leading to "Forgot Password" exploit that leaks registered user email.lowCVSS 3.1EPSS 0.5%
- CVE-2023-49273: Privilege Escalation using SpoofinglowCVSS 3.1EPSS 0.4%
- CVE-2023-49089: Using the directory back payload (“/../”) in a package name allows placement of package in other folders.lowCVSS 3.1EPSS 0.6%
- CVE-2023-48313: DOM-XSS on Backoffice login screen.lowCVSS 3.1EPSS 0.4%
Most severe Umbraco.Cms (NuGet) vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-2025-67288: Umbraco CMS arbitrary file upload in PDF processingcriticalCVSS 10EPSS 0.5%
- CVE-2026-69197: Umbraco Delivery API authorization bypass in content reference expansionhighCVSS 4EPSS 0.7%
- CVE-2026-46616: Umbraco CMS open redirect in member Surface ControllersmediumCVSS 5.4EPSS 0.3%
- CVE-2025-66625: Umbraco Vulnerable to Improper File Access and Credential Exposure in Dictionary Import FunctionalitymediumCVSS 4.9EPSS 0.4%
- CVE-2026-46609: Umbraco CMS HTML injection in Backoffice confirmation dialogmediumCVSS 4.6EPSS 0.2%
- CVE-2025-24011: Umbraco Allows User Enumeration Feasible Based On Management API Timing and Response CodeslowCVSS 3.1EPSS 1.5%
- CVE-2025-32017: Umbraco has a Management API Vulnerability to Path Traversal With Authenticated UserslowCVSS 3.1EPSS 0.6%
- CVE-2023-49089: Using the directory back payload (“/../”) in a package name allows placement of package in other folders.lowCVSS 3.1EPSS 0.6%
- CVE-2024-10761: XSS/HTML Injection Vulnerability in Umbraco Preview BadgelowCVSS 3.1EPSS 0.6%
- CVE-2023-49278: Brute force exploit can be used to collect valid usernameslowCVSS 3.1EPSS 0.5%
Vulnerabilities per week
Nothing in the last four weeks, down from 1 vulnerability in the four before. The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 17 Aug 2026 | 0 | 0 | |
| 24 Aug 2026 | 0 | 0 | |
| 31 Aug 2026 | 0 | 0 | |
| 7 Sep 2026 | 0 | 0 | |
| 14 Sep 2026 | 1 | 0 | |
| 21 Sep 2026 | 0 | 0 | |
| 28 Sep 2026 | 0 | 0 | |
| 5 Oct 2026 | 0 | 0 | |
| 12 Oct 2026 | 0 | 0 | |
| 19 Oct 2026 | 0 | 0 | |
| 26 Oct 2026 | 0 | 0 | |
| 2 Nov 2026 | 0 | 0 | |
| 9 Nov 2026 | 0 | 0 |
Embed a badge
A live badge for a README, a status page or an internal wiki: how many Umbraco.Cms (NuGet) vulnerabilities were published in the last 7 days and how many of them are critical, refreshed hourly.
[](https://junglewise.ai/threats/technologies/umbraco-cms)<a href="https://junglewise.ai/threats/technologies/umbraco-cms"><img src="https://junglewise.ai/threats/technologies/umbraco-cms/badge.svg" alt="Umbraco.Cms (NuGet) vulnerabilities" /></a>How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/technologies/umbraco-cms.json, and this page as text at https://junglewise.ai/threats/technologies/umbraco-cms.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "Umbraco.Cms (NuGet) vulnerabilities", https://junglewise.ai/threats/technologies/umbraco-cms, 9 November 2026.