VULNERABILITY INTELLIGENCE

CVE-2025-68924

CVSS score7.5 HIGH

EPSS probability0.76%

CISA KEVNot currently listed

Published2026-01-16

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

In Umbraco UmbracoForms through 8.13.16, an authenticated attacker can supply a malicious WSDL (aka Webservice) URL as a data source for remote code execution.

Weakness classification

cve@mitre.org: CWE-829

Primary references

cve@mitre.org — Mitigation, VDB Entry, Vendor Advisory
cve@mitre.org — Release Notes
cve@mitre.org — Product