Webinar

From Running Projects to Growing Portfolios

Register Now →
Book a discovery call
Book a discovery call

Security Advisory: Upcoming Security Patch for Umbraco Forms ready on July 28, 2026 at 08 AM UTC

This is a heads-up so you can prepare for action

Rick Butterfield
Written by Rick Butterfield

Security Update Notice: A security vulnerability has been identified in Umbraco Forms. A security patch is scheduled for release on Tuesday, July 28th, 2026 at 08 AM UTC. In accordance with our security policy, we are providing this heads-up, but full details about the vulnerability will be withheld until the release to ensure that all users have the opportunity to update their installations.



Who’s affected?

  • Affected Product Version Range:

    • 13.0.0-13.9.7

    • 17.0.0-17.4.6

    • 18.0.0-18.0.4

  • Severity: High

We strongly recommend that all users prepare to update their installations immediately upon the release of the patch.

How do I prepare?

As we are looking at a patch upgrade, and the fix is straightforward, we expect the patch upgrade to only require minimal effort per project. This is a security patch and we advise you to put aside resources to upgrade to the latest patch version as soon as possible after the release. Patches will be available for Umbraco Forms 13, 17, and 18. We recommend keeping an eye out for the blog post and update on July 28th, 2026.

How to upgrade?

If you’re using Umbraco Forms versions 13.9, 17.4, or 18.0, you will be able to upgrade to a new patch version of these releases the way you would normally upgrade.

How do you check which version you are on? Reach out with this blog post to your technical contact for your Umbraco site and they will be able to take care of the necessary precautions. 

Timeline

  • Notification: July 23, 2026

  • Patch Release: July 28, 2026, 8 AM UTC

  • Full Disclosure: The detailed security advisory will be published alongside the patch release.

More Information

If you have any questions or comments about this advisory, make sure to get in touch with us through our dedicated security email address as listed on https://umbraco.com/security. Here you can also find information on how we handle security-related issues.

If you want to get notified about security heads-ups and advisories directly, sign up for the Umbraco Security mailing list.