UM
Product
Umbraco-CMS
by umbraco · last CVE Oct 27, 2026
60
CVEs
0
On KEV
10.0
Max CVSS
2
New 30D
Severity mix
Critical 5High 9Medium 43Low 2
Watch

Add Umbraco-CMS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-111624
3.7
0%
Oct 16
Umbraco CMS before 17.7.1 and 18.2.1 Missing Authorization on SignalR Hubs
Affected: 17.0.0 before 17.7.1; 18.0.0 before 18.2.1
CVE-2024-48926
3.1
0%
Oct 22
Umbraco CMS logout page displayed before session expiration
Affected: >= 13.0.0, < 13.5.2; >= 10.0.0, < 10.8.7; >= 8.0.0, < 8.18.15
Showing 2