Skip to content
Threat Feed
Subscribe

Vendor

Umbraco

1 brief RSS
high advisory

Umbraco Delivery API Authorization Bypass via Node Expansion

Umbraco CMS contains an authorization bypass vulnerability (CVE-2026-69197) in the Delivery API where protected content is leaked when referenced by an unprotected node through expansion parameters.

Umbraco CMS authorization-bypass api-security umbraco cve-2026-69197
1t 1c