Umbraco Umbraco Cms vulnerabilities
57 published vulnerabilities in Umbraco Umbraco Cms. The most were published in 2024 (13), and 5 so far in 2026.
Umbraco Umbraco Cms vulnerabilities by year
2012
2013
2014
2017
2018
2019
2020
2021
2022
2023
2024
2025
2026
Most exploited Umbraco Umbraco Cms vulnerabilities
- CVE-2025-67288 Umbraco CMS has an arbitrary file upload vulnerability
- CVE-2014-10074 File upload in n/a
- CVE-2012-1301 Server-side request forgery in n/a
- CVE-2012-10054 Umbraco CMS < 4.7.1 codeEditorSave.asmx RCE
- CVE-2025-32017 Umbraco has a Management API Vulnerability to Path Traversal With Authenticated Users
- CVE-2020-9471 Umbraco CMS Authenticated File Upload
- CVE-2022-22690 Umbraco Remote ApplicationURL Overwrite
- CVE-2023-49089 Umbraco CMS possible path traversal when creating packages from backoffice
- CVE-2023-37267 Umbraco allows possible Admin-level access to backoffice without Auth under rare conditions
- CVE-2013-4793 Auth bypass in n/a
- CVE-2026-31834 Umbraco Affected by Vertical Privilege Escalation via Missing Authorization Checks
- CVE-2019-25137 Code injection in n/a
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.