Skip to content
Threat Feed
Subscribe

Vendor

Umbraco

2 briefs RSS
high advisory

Umbraco CMS: Authentication bypass (CVE-2026-117553)

Umbraco CMS contains an authentication bypass vulnerability involving Host header poisoning that allows unauthenticated attackers to hijack back-office sessions and execute code via Razor templates.

Umbraco CMS +1
1c
high advisory

Umbraco Delivery API Authorization Bypass via Node Expansion

Umbraco CMS contains an authorization bypass vulnerability (CVE-2026-69197) in the Delivery API where protected content is leaked when referenced by an unprotected node through expansion parameters.

Umbraco CMS authorization-bypass api-security umbraco cve-2026-69197
1t 1c