Security blog posts

This security vulnerability affects most Umbraco site and is high-severity. Cloud sites are fixed automatically. Find the manual fix for projects outside Cloud here.

A vulnerability has been detected in Umbraco. A fix will be published on Tuesday the 17th of March. We recommend you prepare to implement the fix.

A low-severity security issue for projects running version 7.0-7.14. Patch upgrades and a workaround is available. Umbraco Cloud sites get fix automatically

Fix the vulnerability by upgrading to Umbraco 8.1.1 or 7.15.1 today, or by implementing the manual fix.

Please read the following Security Advisory from July 9th 2019 and implement the fix | Affected versions: 6.2.0-6.2.6, 7.0.0-7.14.0 & 8.0.0-8.0.2

6 month after the initiation of GDPR - what has happened? What have you learned? Kim will give you an update on the aftermath following the GDPR.

Last week we discovered a vulnerability - today we are providing you with a fix | All Umbraco Cloud sites are being patched automatically | Read more here

We advise you to be ready to patch your site with this fix | The fix will be ready on the 20th of September 2018 at 07:00 UTC

Get the latest update on Umbraco and our GDPR initiatives right here. Umbraco's role and responsibilities as a Data Controller and Data Processor.