Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:umbraco:cms:*:*:*:*:*:*:*:*

1 brief RSS
high advisory

Umbraco Delivery API Authorization Bypass via Node Expansion

Umbraco CMS contains an authorization bypass vulnerability (CVE-2026-69197) in the Delivery API where protected content is leaked when referenced by an unprotected node through expansion parameters.

Umbraco CMS authorization-bypass api-security umbraco cve-2026-69197
1t 1c