https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T18:28:40.246772+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-193765 EUVD-2026-193765 2026-10-07T18:28:40.249121+00:00 EUVD-2026-193765 https://cve.radiocsirt.org/vuln/fkie_cve-2023-49278 fkie_cve-2023-49278 2026-10-07T18:28:40.249155+00:00

Umbraco is an ASP.NET content management system (CMS). Starting in version 8.0.0 and prior to versions 8.18.10, 10.8.1, and 12.3.4, a brute force exploit can be used to collect valid usernames. Versions 8.18.10, 10.8.1, and 12.3.4 contain a patch for this issue.

 https://cve.radiocsirt.org/vuln/ghsa-7x74-h8cw-qhxq GHSA-7x74-h8cw-qhxq — Brute force exploit can be used to collect valid usernames 2026-10-07T18:28:40.249185+00:00

Affected: NuGet: Umbraco.CMS

#### Impact A brute force exploit that can be used to collect valid usernames is possible.

#### Explanation of the vulnerability It's a brute force exploit that can be used to collect valid usernames by using the “forgot password” function when trying to log into the Backoffice. If the username/email is known, it is easier to find the corresponding password. If an email address that was already used and registered by a user, is provided as an input, the server internal processing time takes longer. If the email address does not exist in the database of the registered users, the server would respond immediately.

 https://cve.radiocsirt.org/vuln/gsd-2023-49278 gsd-2023-49278 2026-10-07T18:28:40.249219+00:00 gsd-2023-49278