Umbraco-CMS vulnerabilities

CVEs whose affected-version data names the Umbraco-CMS package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-69197High· 8.7

6d ago

Umbraco is an ASP.NET CMS

Umbraco is an ASP.NET CMS. Prior to 13.15.1, 17.5.3, and 18.0.2, the Content Delivery API applies member and Public Access checks to the directly requested node but not to referenced nodes serialized through Content Picker or Multi-Node …

▾ Twilightumbraco · Umbraco-CMSEPSS 0.38%via NVD