Threats tagged 'ghsa-q9r6-5jwm-rmgp'

1 threat

Threats tagged 'ghsa-q9r6-5jwm-rmgp'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.3	EPSS 0.3%	CVE-2026-111624Umbraco-CMS · Missing Authentication for Critical Function Medium6.3EPSS 0.3%2026-10-16CVE Database V5CVE-2026-111624 Umbraco CMS versions before 17.7.1 and 18.2.1 have a missing authorization vulnerability that allows unauthenticated clients to connect to certain backoffice SignalR hubs. This flaw permits attackers to complete the SignalR negotiate step and receive notifications disclosing content keys, including unpublished content, and revealing editorial activity timing. EPSS 0.3%Vulnerability umbraco #ghsa-q9r6-5jwm-rmgp	CVE Database V5	2026-10-16

Showing 1–1 of 1 result