Security blog posts

Updated 2023-08-28: Additional patch is available for the medium-severity vulnerability identified in Umbraco 8, 10 and 11. Upgrade to the latest version.

A medium-severity vulnerability has been identified in Umbraco 9 and 10. Cloud is not affected. See if your site(s) are secure and how to address the issue.

A medium-severity security issue has been identified in Umbraco CMS. A fix will be published on September 6. This is a heads-up so you can prepare for action

A vulnerability has been identified in Umbraco CMS. Find out if your site(s) are secure and how to address any vulnerability concerns in Umbraco 7, 8 or 9.

This security vulnerability affects sites with Umbraco Forms 4+ installed and is high-severity. Cloud sites are fixed automatically. Patch is available.

A vulnerability has been detected in Umbraco Forms 4+. A fix will be published on Tuesday the 20th of July. We recommend you prepare to implement the fix.

A bug in Umbraco Forms which could possible leak data, has been detected. Patch releases are ready today and is automatically being added to Umbraco Cloud sites.

This security vulnerability affects most Umbraco site and is high-severity. Cloud sites are fixed automatically. Find the manual fix for projects outside Cloud here.

A vulnerability has been detected in Umbraco. A fix will be published on Tuesday the 17th of March. We recommend you prepare to implement the fix.