The official profile for Umbraco - The Friendly OpenSource ASP.NET CMS. Managed by Umbraco HQ.
Emmanuel Tissera summarizes Umbraco’s first APAC year in Melbourne: local 24/5 support, partner growth from 16 to 26, events and workshops (Melbourne, Auckland, India Festival), community meetups, enterprise engagement, and a small local team driving regional sales and support — with more events and partner outreach planned.
Umbraco CMS 18.3.0 brings fixes for several security issues, ImageSharp dependency and licensing changes that need attention, new features such as member and group filters, breadcrumbs and server-side sorting, plus performance improvements and many bug fixes.
Umbraco 17.8.0 fixes multiple critical security issues, updates SixLabors.ImageSharp (note potential release-build license checks), adds features like hasChildren in the Management API, breadcrumbs, server-side sorting and preview reconnects, and includes many bug fixes and performance improvements.
Umbraco HQ praises the welcoming Umbraco Community—likening it to a family gathering—highlighting members who support forums, build packages, review pull requests, and foster diversity, inclusion, and encouragement, making contributions feel valued and creating a friendly open-source home.
Umbraco HQ explains how AI needs rich, structured context to deliver useful marketing and website outcomes. Speakers Chris Osterhaus and Mads Person stress building a “context layer” (content, product data, PR) and processes—or composition tools like Umbraco Compose—to keep data accurate, fresh, and AI-ready at scale.
Anders Nis Herforth Larsen reports that ten vulnerabilities across Umbraco CMS, Umbraco Forms, and Umbraco AI (two high, seven moderate, one low) were fixed; patches released (CMS 13.16.3/17.7.2/18.2.2, Forms 13.9.12/17.6.2/18.2.2, AI components updated). Upgrade recommended; interim mitigations provided.
Lasse Fredslund celebrates the Umbraco US Partner Summit 2026—a community evening of dinner, drinks, and trivia—and highlights award winners: Proworks (Mold Inspection Sciences) for AI-driven publishing and 80% traffic growth; Scandia (OAS Federal Credit Union) for data-layer rebuild and 37% conversion; Adage Technologies (Adrienne Arsht Center) for a Cloud migration boosting speed and accessibility.
Mats Persson explains that recent critical PHP vulnerabilities (CVSS 9.2) do not affect Umbraco because it runs on .NET/ASP.NET Core, not PHP; organizations should still patch any PHP-based sites or tools they run alongside Umbraco, keep Umbraco/.NET updated, and embrace open disclosure and community cooperation for security.
Rick Butterfield explains that Umbraco Forms 20 replaces its separate "Forms Security" with standard CMS user-group permissions. Permissions move to the CMS user group Permissions tab, become additive (no deny/fallback), remove per-user and start-folder settings, and migrate existing setups to group grants. Several APIs, storage tables, and config settings are removed or reshaped.
The Umbraco Community Blog invites new and returning applicants to join the Package Team, focusing on enhancing the Umbraco Marketplace. The team aims to simplify package development and distribution, offering members influence, training, and networking opportunities. Applications are open until November 27, encouraging diverse contributors to apply.
The Umbraco Community Blog announces the opening of applications for the Core Collaborators team, led by new steward Nikolaj Lauridsen. With community contributions increasing significantly, the team focuses on reviewing pull requests and supporting new contributors. Applications are open until November 27, inviting diverse participants to enhance Umbraco CMS.
Asha Chaudhary, a Certified Master and MVP with over 11 years of experience in Umbraco, actively contributes to the community by organizing meetups and leading the Umbraco Education Program in India. Passionate about integrating AI with Umbraco, she aims to enhance accessibility and knowledge sharing within the platform.
Umbraco HQ highlights the value of their partnerships through testimonials from various partners. Key benefits include direct access to Umbraco HQ, ongoing developer training, and enhanced client satisfaction, contributing to high net promoter scores. Potential partners are encouraged to engage with Partner Managers to explore opportunities for agency growth.
Anders Nis Herforth Larsen reports that four vulnerabilities in Umbraco CMS have been identified and patched, with two classified as moderate and two as low severity. Users are advised to upgrade to versions 17.7.1 or 18.2.1 to mitigate risks, particularly for those using custom media path schemes.
Umbraco will increase prices across its Cloud plans, partnerships, Enterprise offerings, Heartcore, add-ons, Engage, training and support services. The new pricing takes effect 1 January 2027, or at customers’ first renewal thereafter, affecting both new and existing customers.
Tim, Marketing Manager at Die Zeit, discusses the growth of their acquisition marketing team from three to over 20 members using Umbraco for nearly a decade. The team now manages over 600 targeted landing pages, generating more than half of campaign responses, emphasizing Umbraco's reliability and flexibility for their marketing needs.
Filip Bech-Larsen's Q3 2026 Umbraco product update highlights advancements in AI features, including the Copilot Workspace and Editor MCP, enhancing editor and developer collaboration. Additionally, new enterprise-grade enhancements in Umbraco Cloud, such as Load Balancing and Dedicated Resource tiers, improve performance and scalability for projects.
The first Dutch Umbraco Alliance Festival gathered around 100 attendees at STOOM in Apeldoorn, featuring discussions on AI, Aspire, and headless technology. Organized by a collaborative team from four agencies, the event highlighted community-driven innovations and included keynotes, networking, and engaging talks, revitalizing the local Umbraco community spirit.
Umbraco HQ introduces the Copilot Workspace, enhancing user interaction with AI by allowing persistent conversations and project-based context. This update also features knowledge sets for package developers, enabling embedded contextual information for improved AI responses. The new Copilot offers a more focused approach to content editing, streamlining user experience.