Security blog posts

If you have installed Umbraco Forms, you need to update now | Contour is not affected and Umbraco Cloud customers have all been updated automatically

A newly found security issue could lead to disclosure of private information - We have provided a fix for the affected sites | Read more about it here

A routine security audit conducted by Umbraco’s third party security analyst, Dionach has identified a vulnerability in our add-on product Umbraco Forms

If you're still running Umbraco sites that are of versions between 4.5.0 and 4.7.1.1 you need to update your site today with the patches provided here

Update: this information is now obsolete, a new vulnerability was found and a new update is required | Version 4.5 - 7.1.9 is affected

Today we're publishing the results of 2 independent security audits that uncovered issues that you need to be aware of & fix in your Umbraco installations

Security update from May 23, 2014 - one more major issue fixed in 4.7.0 through 4.7.1.1 | New patches for the affected versions

This only applies to versions of Umbraco from 2011 or older. If you're running Umbraco 4.5 - 4.7.0, this blog post contains important information.

We analyzed the entire Umbraco core and found two Umbraco vulnerabilities | Also included are links on how we handle vulnerabilities at Umbraco