https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T18:53:42.432885+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-280821 EUVD-2026-280821 2026-10-06T18:53:42.436136+00:00 EUVD-2026-280821 https://cve.radiocsirt.org/vuln/fkie_cve-2021-47776 fkie_cve-2021-47776 2026-10-06T18:53:42.436169+00:00

Umbraco CMS v8.14.1 contains a server-side request forgery vulnerability that allows attackers to manipulate baseUrl parameters in multiple dashboard and help controller endpoints. Attackers can craft malicious requests to the GetContextHelpForPage, GetRemoteDashboardContent, and GetRemoteDashboardCss endpoints to trigger unauthorized server-side requests to external hosts.

 https://cve.radiocsirt.org/vuln/ghsa-h66j-xm43-47pp GHSA-h66j-xm43-47pp — Umbraco CMS contains a server-side request forgery vulnerability 2026-10-06T18:53:42.436200+00:00

Affected: NuGet: UmbracoCms

Umbraco CMS v8.14.1 contains a server-side request forgery vulnerability that allows attackers to manipulate baseUrl parameters in multiple dashboard and help controller endpoints. Attackers can craft malicious requests to the GetContextHelpForPage, GetRemoteDashboardContent, and GetRemoteDashboardCss endpoints to trigger unauthorized server-side requests to external hosts.