Skip to content
OpenAdvisories

Product · OrchardCMS

Orchard

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.1
    CVE-2026-119649

    Orchard CMS 1.10.3 through 1.11 Improper Authorization via Media Library Folder Permission Check

    Orchard CMS 1.10.3 through 1.11 contains an improper authorization vulnerability in MediaLibraryService.CheckMediaFolderPermission() that allows authenticated Authors and Contributors to access other users' media. Attackers can display, clone, and delete othe…

    OrchardCMS Orchard