CVE-2026-111624— Umbraco CMS before 17.7.1 and 18.2.1 Missing Authorization on SignalR Hubs
Quick assessment
Affected
umbraco Umbraco-CMS
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Umbraco CMS 17.7.1 之前版本以及 18.2.1 之前版本存在授权缺失漏洞，允许未认证客户端连接到后台管理界面的 PreviewHub 和 BackofficeHub SignalR 集线器。攻击者可完成 SignalR 协商步骤，并接收刷新通知，从而泄露内容密钥（包括未发布的内容），同时暴露编辑活动的发生时间。
Affected Version Matrix 2
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| umbraco | Umbraco-CMS | 17.0.0< 17.7.1 |
affected |
18.0.0< 18.2.1 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-111624
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Umbraco CMS before 17.7.1 and 18.2.1 Missing Authorization on SignalR Hubs
Source: CVE Program / CVE List V5
Vulnerability Description
Umbraco CMS before 17.7.1 and 18.2.1 contains a missing authorization vulnerability that allows unauthenticated clients to connect to the backoffice PreviewHub and BackofficeHub SignalR hubs. Attackers can complete the SignalR negotiate step and receive refreshed notifications that disclose content keys, including unpublished content, and reveal editorial activity timing.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
关键功能的认证机制缺失
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| umbraco | Umbraco-CMS | 17.0.0 ~ 17.7.1 | - |
|
II. Public POCs for CVE-2026-111624
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-111624
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-111624 (3)
Vendor Advisories for CVE-2026-111624 (2)
Vendor Pages for CVE-2026-111624 (2)
-
🔗 Release 17.7.1 · umbraco/Umbraco-CMS · GitHub release-notes
-
IV. Related Vulnerabilities
Same product: Umbraco-CMS
-
CVE-2026-69197
Umbraco: Delivery API leaks protected (Public Access) conten -
CVE-2026-46609
Umbraco.Cms: XSS/HTML Injection in Umbraco Backoffice confir -
CVE-2026-46616
Umbraco.Cms: Open Redirect Vulnerability in Surface Controll -
CVE-2026-31834
Umbraco Affected by Vertical Privilege Escalation via Missin -
CVE-2026-31833
Umbraco has Stored XSS in UFM Rendering Pipeline via Permiss
Same vendor: umbraco
-
CVE-2026-69197
Umbraco: Delivery API leaks protected (Public Access) conten -
CVE-2026-46609
Umbraco.Cms: XSS/HTML Injection in Umbraco Backoffice confir -
CVE-2026-46616
Umbraco.Cms: Open Redirect Vulnerability in Surface Controll -
CVE-2026-31834
Umbraco Affected by Vertical Privilege Escalation via Missin -
CVE-2026-31833
Umbraco has Stored XSS in UFM Rendering Pipeline via Permiss
Same weakness: CWE-306
-
CVE-2026-75753
ASUS 路由器固件关键功能缺失认证漏洞 -
CVE-2026-77932
DB-GPT through 0.8.2 Unauthenticated RCE via /api/v1/chat/re -
CVE-2026-75128
Langchain-Chatchat through 0.3.1.3 Unauthenticated RCE via / -
CVE-2026-109442
piflow 2.0.0 through 2.0.1 Unauthenticated RCE via Chat Agen -
CVE-2026-82166
Dell Application Store 26.05.0.7 前版本身份验证缺失漏洞
V. Comments for CVE-2026-111624
No comments yet