OrchardCMS vulnerabilities
We track 1 vulnerability in OrchardCMS products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 30, 2026.
1vulnerabilities
0critical
1high
0exploited
7.1average CVSS score
Latest OrchardCMS vulnerabilities
- 7.1 High severity
Orchard: Incorrect Authorization
Orchard CMS 1.10.3 through 1.11 contains an improper authorization vulnerability in MediaLibraryService.CheckMediaFolderPermission() that allows authenticated Authors and Contributors to access other users' media. Attackers can display, clone, and delete other