A vulnerability has been found in Umbraco CMS 16.3.3 and classified as critical. Affected by this issue is some unknown functionality of the component PDF File Handler. Performing manipulation results in unrestricted upload.

This vulnerability is reported as CVE-2025-67288. The attack is possible to be carried out remotely. No exploit exists.