https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T15:44:56.797243+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-159222 EUVD-2026-159222 2026-10-12T15:44:56.799599+00:00 EUVD-2026-159222 https://cve.radiocsirt.org/vuln/fkie_cve-2024-43376 fkie_cve-2024-43376 2026-10-12T15:44:56.799628+00:00

Umbraco is an ASP.NET CMS. Some endpoints in the Management API can return stack trace information, even when Umbraco is not in debug mode. This vulnerability is fixed in 14.1.2.

 https://cve.radiocsirt.org/vuln/ghsa-77gj-crhp-3gvx GHSA-77gj-crhp-3gvx — Umbraco CMS vulnerable to Generation of Error Message Containing Sensitive Information 2026-10-12T15:44:56.799656+00:00

Affected: NuGet: Umbraco.Cms.Api.Management

### Impact Some endpoints in the Management API can return stack trace information, even when Umbraco is not in debug mode.

### Explanation of the vulnerability Management API endpoints leaked stack traces in case of Internal server errors, no matter if the debug setting was disabled.

E.g. when paging with negative numbers in some apis