Product

Umbraco CMS (12.0.0-13.15.0, 14.0.0-17.5.2, 18.0.0-18.0.1)

1 brief RSS

Umbraco Delivery API Authorization Bypass via Node Expansion

Umbraco CMS contains an authorization bypass vulnerability (CVE-2026-69197) in the Delivery API where protected content is leaked when referenced by an unprotected node through expansion parameters.

Umbraco CMS authorization-bypass api-security umbraco cve-2026-69197

1t 1c 1d ago