What’s Vulnerable › Vulnerabilities

CVE-2025-68924

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-01-16 · updated 2026-06-17
• Weakness: CWE-829

Description

In Umbraco UmbracoForms through 8.13.16, an authenticated attacker can supply a malicious WSDL (aka Webservice) URL as a data source for remote code execution.

Affected products

• Umbraco.Forms.Issues: through 8.13.16

References

• https://github.com/advisories/GHSA-vrgw-pc9c-qrrc
• https://our.umbraco.com/packages/developer-tools/umbraco-forms/
• https://www.nuget.org/packages/UmbracoForms

Get alerted when CVE-2025-68924 or the next vulnerability affects your stack