CVE-2026-24687 - Umbraco.Forms has path traversal and file enumeration vulnerability in Linux/Mac
CVE ID : CVE-2026-24687
Published : Jan. 29, 2026, 8:16 p.m. | 1 hour, 51 minutes ago
Description : Umbraco Forms is a form builder that integrates with the Umbraco content ...
CVE-2026-24687 - Umbraco.Forms has path traversal and file enumeration vulnerability in Linux/Mac
Umbraco Forms is a form builder that integrates with the Umbraco content management system. It's possible for an authenticated backoffice-user to enumerate and traverse paths/files on the systems filesystem and read their contents, on Mac/Linux Umbraco installations using Forms. As Umbraco Cloud runs in a Windows environment, Cloud users aren't …