https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-21T00:36:35.432201+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-161093 EUVD-2026-161093 2026-10-21T00:36:35.434828+00:00 EUVD-2026-161093 https://cve.radiocsirt.org/vuln/fkie_cve-2024-43377 fkie_cve-2024-43377 2026-10-21T00:36:35.434905+00:00

Umbraco CMS is an ASP.NET CMS. An authenticated user can access a few unintended endpoints. This issue is fixed in 14.1.2.

 https://cve.radiocsirt.org/vuln/ghsa-hrww-x3fq-xcvh GHSA-hrww-x3fq-xcvh — Umbraco CMS Improper Access Control vulnerability 2026-10-21T00:36:35.434964+00:00

Affected: NuGet: Umbraco.Cms

### Impact As an authenticated user one can access a few unintended endpoints

### Explanation of the vulnerability Few endpoints in Umbraco Management API was not protected by a specific section. These just required you to be authenticated. Due to the fact that a member is also just authenticated, it was possible to get info from these endpoints using a member token.