Security blog posts

A medium-severity security issue has been identified. We recommend you update your projects. Find all information and instructions here

A high-severity security issue has been identified in Umbraco CMS. Security patches for Umbraco 10, 11, and 12 now available.

A high-severity security issue has been identified in Umbraco CMS. A patch will be published on July 13. This is a heads-up so you can prepare for action.

Updated 2023-08-28: Additional patch is available for the medium-severity vulnerability identified in Umbraco 8, 10 and 11. Upgrade to the latest version.

A medium-severity vulnerability has been identified in Umbraco 9 and 10. Cloud is not affected. See if your site(s) are secure and how to address the issue.

A medium-severity security issue has been identified in Umbraco CMS. A fix will be published on September 6. This is a heads-up so you can prepare for action

A vulnerability has been identified in Umbraco CMS. Find out if your site(s) are secure and how to address any vulnerability concerns in Umbraco 7, 8 or 9.

This security vulnerability affects sites with Umbraco Forms 4+ installed and is high-severity. Cloud sites are fixed automatically. Patch is available.

A vulnerability has been detected in Umbraco Forms 4+. A fix will be published on Tuesday the 20th of July. We recommend you prepare to implement the fix.