Security blog posts

Security patches for Umbraco CMS, Forms, and AI are now out. We recommend you to upgrade to the fixed versions.

Upcoming security patches for Umbraco CMS, Forms, and AI drop on August 18, 2026, at 8 AM UTC. Includes high-severity fixes.

A high-level security vulnerability has been identified in Umbraco Forms. A security patch is out now and we highly recommend upgrading. Projects on Umbraco Cloud are fixed automatically.

A security vulnerability has been identified in Umbraco Forms. A security patch is scheduled for release on Tuesday, July 28th, 2026 at 08 AM UTC.

Security Advisory, July 7, 2026: Security Patches are now available

Security patches are available for Umbraco.AI core package, versions 1.0.0 through 1.13.x versions fix a moderate vulnerability. Find the fix here

Security patches are available for Umbraco versions 16 and 17 to fix three moderate-to-high vulnerabilities. Upgrade now to secure your CMS. Projects on Umbraco Cloud will automatically receive the fixes.

A moderate vulnerability has been found and fixed in Umbraco 13. Today, we have released a patch for the affected version and recommend upgrading. Projects hosted on Umbraco Cloud will receive the fix automatically.

Moderate and low security vulnerabilities have been found and fixed in Smidge, an upstream dependency for Umbraco 13. Today, we have released patches for the affected versions and recommend upgrading to the latest patch. Projects hosted on Umbraco Cloud will receive the fix automatically.