Alta
CVE-2026-69197
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 41
Restablecer filtros
Media
CVE-2026-46609
Umbraco.Cms: XSS/HTML Injection in Umbraco Backoffice confirmation dialog
Media
CVE-2026-46616
Umbraco.Cms: Open Redirect Vulnerability in Surface Controllers
Alta
CVE-2026-31834
Umbraco Affected by Vertical Privilege Escalation via Missing Authorization Checks
Media
CVE-2026-31833
Umbraco has Stored XSS in UFM Rendering Pipeline via Permissive DOMPurify Attribute Filtering
Media
CVE-2026-31832
Umbraco Backoffice API Allows Unauthorized Modification of Domain Data
Media
CVE-2025-67288
Umbraco CMS has an arbitrary file upload vulnerability
Media
CVE-2025-66625
Umbraco Vulnerable to Improper File Access and Credential Exposure in Dictionary Import Functionality
Media
CVE-2025-54425
Umbraco Delivery API allows for cached requests to be returned with an invalid API key
Media
CVE-2025-49147
Umbraco CMS disclosure of configured password requirements
Media
CVE-2025-48953
Umbraco Vulnerable to By-Pass of Configured Allowed Extensions for File Uploads
Baja
CVE-2025-47280
Umbraco.Forms has HTML injection vulnerability in 'Send email' workflow
Media
CVE-2025-46736
Umbraco Makes User Enumeration Feasible Based on Timing of Login Response
Alta
CVE-2025-32017
Umbraco has a Management API Vulnerability to Path Traversal With Authenticated Users
Media
CVE-2025-27602
Umbraco Allows a Restricted Editor User to Delete Media Item or Access Unauthorized Content
Media
CVE-2025-27601
Umbraco Allows Improper API Access Control to Low-Privilege Users to Data Type Functionality
Media
CVE-2024-10761
XSS/HTML Injection Vulnerability in Umbraco Preview Badge
Media
CVE-2025-24011
Umbraco Allows User Enumeration Feasible Based On Management API Timing and Response Codes
Media
CVE-2025-24012
XSS/HTML Injection Vulnerability in Umbraco Backoffice Components
Media
CVE-2024-48929
Umbraco CMS Has Incomplete Server Termination During Explicit Sign-Out
Media
CVE-2024-48927
Umbraco has a Potential Code Execution Risk When Viewing SVG Files in Full Screen in Backoffice
Media
CVE-2024-48926
Umbraco CMS logout page displayed before session expiration
Baja
CVE-2024-48925
Umbraco CMS Improper Access Control Vulnerability Allows Low-Privilege Users to Access Webhook API
Media
CVE-2024-47819
Umbraco CMS vulnerable to stored Cross-site Scripting in the "dictionary name" on Dictionary section
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.