Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Umbraco is an ASP.NET CMS. From 15.3.1 to before 16.5.1 and 17.2.2, A privilege escalation vulnerability has been identified in Umbraco CMS. Under certain conditions, authenticated backoffice users with permission to manage users, may be able to elevate their privileges due to insufficient authorization enforcement when modifying user group memberships. The affected functionality does not properly validate whether a user has sufficient privileges to assign highly privileged roles. This vulnerability is fixed in 16.5.1 and 17.2.2.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-31834 Privilege Escalation in Umbraco CMS via Unauthorized User Group Membership Modification https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-31834
Post summary
The text announces CVE-2026-31834, a Privilege Escalation vulnerability in Umbraco CMS caused by unauthorized user group modification. No proof of concept, exploit, or patch details are provided.
🔴 Umbraco, Privilege Escalation, #CVE-2026-31834 (High) https://dailycve.com/umbraco-privilege-escalation-cve-2026-31834-high/
Post summary
The post announces a high‑severity privilege escalation flaw in Umbraco (CVE‑2026‑31834) but provides only basic technical details, with no PoC, exploit code, active exploitation, or patch information.
CVE-2026-31834 Umbraco is an http://ASP.NET CMS. From 15.3.1 to before 16.5.1 and 17.2.2, A privilege escalation vulnerability has been identified in Umbraco CMS. Under certain conditions,… https://www.cve.org/CVERecord?id=CVE-2026-31834
Post summary
A privilege‑escalation vulnerability affecting multiple Umbraco CMS versions has been publicly disclosed; no PoC, exploit, or patch information is currently available.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | umbraco | umbraco_cms | - | - | - |