https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 21 Oct 2026 00:36:30 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-161093 EUVD-2026-161093 https://cve.radiocsirt.org/vuln/euvd-2026-161093 https://cve.radiocsirt.org/vuln/fkie_cve-2024-43377 <p>Umbraco CMS is an ASP.NET CMS. An authenticated user can access a few unintended endpoints. This issue is fixed in 14.1.2.</p> <p>Umbraco CMS is an ASP.NET CMS. An authenticated user can access a few unintended endpoints. This issue is fixed in 14.1.2.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-43377 https://cve.radiocsirt.org/vuln/ghsa-hrww-x3fq-xcvh <p><strong>Affected:</strong> NuGet: Umbraco.Cms</p> <p>### Impact As an authenticated user one can access a few unintended endpoints</p> <p>### Explanation of the vulnerability Few endpoints in Umbraco Management API was not protected by a specific section. These just required you to be authenticated. Due to the fact that a member is also just authenticated, it was possible to get info from these endpoints using a member token.</p> <p><strong>Affected:</strong> NuGet: Umbraco.Cms</p> <p>### Impact As an authenticated user one can access a few unintended endpoints</p> <p>### Explanation of the vulnerability Few endpoints in Umbraco Management API was not protected by a specific section. These just required you to be authenticated. Due to the fact that a member is also just authenticated, it was possible to get info from these endpoints using a member token.</p> https://cve.radiocsirt.org/vuln/ghsa-hrww-x3fq-xcvh