CVE-2026-24687
1 advisory.
NuGet/Umbraco.Forms CVE-2026-24687: medium
Umbraco.Forms has Path Traversal and File Enumeration Vulnerabilities in Linux/Mac
Action: Upgrade Umbraco.Forms to 16.4.1 (16.x) or 17.1.1 (17.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 16.0.0 | 16.4.1 | - |
| 17.0.0 | 17.1.1 | - |
Fixed versions
| 16.4.1 | 17.1.1 |
Sources
- osv: GHSA-hm5p-82g6-m3xh
- https://github.com/umbraco/Umbraco.Forms.Issues/security/advisories/GHSA-hm5p-82g6-m3xh
- https://nvd.nist.gov/vuln/detail/CVE-2026-24687
- https://github.com/umbraco/Umbraco.Forms.Issues
CVE-2026-24687 · published · modified · JSON