Skip to content
OpenAdvisories

Package · NuGet

Umbraco.Cms

29 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2025-67288

    Umbraco CMS has an arbitrary file upload vulnerability

    An arbitrary file upload vulnerability in Umbraco CMS v16.3.3 allows attackers to execute arbitrary code by uploading a crafted PDF file. NOTE: this is disputed by the Supplier because the responsibility for file validation (as shown in the documentation) bel…

    Umbraco.Cms NuGet