Umbraco

Security blog posts

Read blog posts related to Security

Medium-severity security vulnerability identified in Umbraco CMS

A vulnerability has been identified in Umbraco CMS. Find out if your site(s) are secure and how to address any vulnerability concerns in Umbraco 7, 8 or 9.

January 20, 2022

Security Patch for Umbraco Forms is now available

This security vulnerability affects sites with Umbraco Forms 4+ installed and is high-severity. Cloud sites are fixed automatically. Patch is available.

Security advisory: Security patches for Umbraco Forms ready on July 20th, 2021, at 7 AM UTC

A vulnerability has been detected in Umbraco Forms 4+. A fix will be published on Tuesday the 20th of July. We recommend you prepare to implement the fix.

Security Advisory: Forms version 8

A bug in Umbraco Forms which could possible leak data, has been detected. Patch releases are ready today and is automatically being added to Umbraco Cloud sites.

Security Patch for your site is now available

This security vulnerability affects most Umbraco site and is high-severity. Cloud sites are fixed automatically. Find the manual fix for projects outside Cloud here.

Security patch ready on March 17th at 7 AM UTC

A vulnerability has been detected in Umbraco. A fix will be published on Tuesday the 17th of March. We recommend you prepare to implement the fix.

Security Advisory - low severity

A low-severity security issue for projects running version 7.0-7.14. Patch upgrades and a workaround is available. Umbraco Cloud sites get fix automatically

December 10, 2019

Security Advisory July 30th 2019

Fix the vulnerability by upgrading to Umbraco 8.1.1 or 7.15.1 today, or by implementing the manual fix.

Security Advisory July 9th 2019 - Patch Available

Please read the following Security Advisory from July 9th 2019 and implement the fix | Affected versions: 6.2.0-6.2.6, 7.0.0-7.14.0 & 8.0.0-8.0.2