Security blog posts

A newly found security issue could lead to disclosure of private information - We have provided a fix for the affected sites | Read more about it here

A routine security audit conducted by Umbraco’s third party security analyst, Dionach has identified a vulnerability in our add-on product Umbraco Forms

If you're still running Umbraco sites that are of versions between 4.5.0 and 4.7.1.1 you need to update your site today with the patches provided here

Update: this information is now obsolete, a new vulnerability was found and a new update is required | Version 4.5 - 7.1.9 is affected

Today we're publishing the results of 2 independent security audits that uncovered issues that you need to be aware of & fix in your Umbraco installations

Security update from May 23, 2014 - one more major issue fixed in 4.7.0 through 4.7.1.1 | New patches for the affected versions

This only applies to versions of Umbraco from 2011 or older. If you're running Umbraco 4.5 - 4.7.0, this blog post contains important information.

Motivated by this week’s discovery of a security vulnerability, we analysed the entire Umbraco core and found two additional major vulnerabilities

During one of the regular security audits that independent security firms (in this case: MWR Labs) do of the core, a severe security vulnerability was found