Skip to content
Typo3 vulnerabilities
Newest
-
typo3 extension "mail"
Information Disclosure in extension "Mail" (mail)
CVE-2026-120328
6.9 Medium
-
typo3 extension "mail"
Open Redirection in extension "Mail" (mail)
CVE-2026-120327
5.3 Medium
-
typo3 extension "mail"
Broken Access Control in extension "Mail" (mail)
CVE-2026-120329
5.3 Medium
-
typo3 extension "mail"
Server-Side Request Forgery in extension "Mail" (mail)
CVE-2026-120331
5.3 Medium
-
typo3 extension "mail"
Broken Access Control in extension "Mail" (mail)
CVE-2026-120330
7.1 High
-
typo3 extension "mail"
Cross-Site Scripting in extension "Mail" (mail)
CVE-2026-120332
5.1 Medium
-
typo3 extension "frontend user registration"
Broken Access Control in extension "Frontend User Registration" (sf_register)
CVE-2026-120333
8.8 High
-
typo3 extension "fal protect"
Broken Access Control in extension "FAL Protect" (fal_protect)
CVE-2026-112069
6.3 Medium
-
typo3 extension "sgalinski cookie consent"
Missing Authorization in extension "sgalinski Cookie Consent" (sg_cookie_optin)
CVE-2026-112065
5.3 Medium
-
typo3 extension "sgalinski cookie consent"
Missing Authorization in extension "sgalinski Cookie Consent" (sg_cookie_optin)
CVE-2026-112066
7.1 High
-
typo3 extension "sgalinski cookie consent"
SQL Injection in extension "sgalinski Cookie Consent" (sg_cookie_optin)
CVE-2026-112064
7.1 High
-
typo3 extension "accessible form captcha"
Captcha Bypass in extension "Accessible Form Captcha" (bw_captcha)
CVE-2026-112067
6.9 Medium
-
typo3 extension "analytics"
Insecure Direct Object Reference in extension "Analytics" (analytics)
CVE-2026-112068
5.3 Medium
-
typo3 extension "kitodo.presentation"
Server-Side Request Forgery in extension "Kitodo.Presentation" (dlf)
CVE-2026-112237
6.9 Medium
-
typo3 extension "typo3 fluid-form by coding.ms"
Broken Access Control in extension "TYPO3 Fluid-Form by coding.ms" (fluid_form)
CVE-2026-112240
6.3 Medium
-
typo3 extension "typo3 fluid-form by coding.ms"
Cross-Site Scripting in extension "TYPO3 Fluid-Form by coding.ms" (fluid_form)
CVE-2026-113442
5.3 Medium
-
typo3 extension "file manager"
SQL Injection in extension "File manager" (ameos_filemanager)
CVE-2026-112238
8.7 High
-
typo3 extension "typo3 shop by coding.ms"
Broken Access Control in extension "TYPO3 Shop by coding.ms" (shop)
CVE-2026-112071
Public exploit
6.9 Medium
-
typo3 extension "typo3 shop by coding.ms"
Broken Access Control in extension "TYPO3 Shop by coding.ms" (shop)
CVE-2026-113468
Public exploit
6.9 Medium
-
typo3 extension "typo3 ai integration extension"
Broken Access Control in extension "TYPO3 AI Integration Extension" (ns_t3ai)
CVE-2026-112239
7.2 High
-
typo3 extension "typo3 ai integration extension"
Sensitive Data Exposure in extension "TYPO3 AI Integration Extension" (ns_t3ai)
CVE-2026-113459
7.1 High
-
typo3 extension "analytics"
Broken Access Control in extension "Analytics" (analytics)
CVE-2026-112070
5.3 Medium
-
typo3 cms
TYPO3 CMS - Security Misconfiguration in Form Framework
CVE-2026-109162
6.3 Medium
-
typo3 femanager
An issue was discovered in the femanager extension 7.x before 7.2.3 for TYPO3. The backend module...
CVE-2023-50460
5.4 Medium
-
typo3 cms
TYPO3 CMS - Information Disclosure via Backend Localization Wizard
CVE-2026-77132
5.3 Medium
-
typo3 cms
TYPO3 CMS - Missing Authorization in lowlevel commands
CVE-2026-85400
7.5 High
-
typo3 extension "apache solr for typo3 - enterprise search"
Broken Access Control in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)
CVE-2026-56092
7.6 High
-
typo3 extension "apache solr for typo3 - enterprise search"
Information Disclosure in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)
CVE-2026-56094
6.3 Medium
-
typo3 extension "apache solr for typo3 - enterprise search"
Broken Access Control in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)
CVE-2026-56093
6.3 Medium
-
typo3 extension "apache solr for typo3 - enterprise search"
Insecure Deserialization in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)
CVE-2026-56095
7.7 High
-
typo3 extension "apache solr for typo3 - enterprise search"
Information Disclosure in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)
CVE-2026-56096
Public exploit
6.3 Medium
-
typo3 extension "modules"
Information Disclosure in extension "Modules" (modules)
CVE-2026-77127
6.0 Medium
-
typo3 extension "event management and registration"
Server-Side Template Injection in extension "Event management and registration" (sf_event_mgt)
CVE-2026-77129
7.7 High
-
typo3 extension "event management and registration"
Broken Access Control in extension "Event management and registration" (sf_event_mgt)
CVE-2026-77128
6.3 Medium
-
typo3 extension "syssy - typo3 monitoring & security checks"
Insufficient Session Expiration in extension "SYSSY - TYPO3 Monitoring & Security Checks" (syssy)
CVE-2026-77130
5.3 Medium
-
typo3 extension "syssy - typo3 monitoring & security checks"
Cleartext Transmission of Sensitive Information in extension "SYSSY - TYPO3 Monitoring & Security Checks" (syssy)
CVE-2026-77131
5.3 Medium
-
typo3 extension "femanager"
Broken Access Control in extension "femanager" (femanager)
CVE-2026-77133
6.0 Medium
-
typo3 extension "femanager"
Information Disclosure in extension "femanager" (femanager)
CVE-2026-77135
8.2 High
-
typo3 extension "femanager"
Broken Access Control in extension "femanager" (femanager)
CVE-2026-77134
8.3 High
-
typo3 extension "powermail"
Server-Side Template Injection in extension "powermail" (powermail)
CVE-2026-77136
9.5 Critical
-
typo3 extension "html5 video player vs. powermail"
Remote Code Execution in extension "HTML5 Video Player vs. Powermail" (html5videoplayer_powermail)
CVE-2026-77138
9.3 Critical
-
typo3 extension "forms export"
SQL Injection in extension "Forms Export" (frp_form_answers)
CVE-2026-77137
7.7 High
-
typo3 extension "mask"
Path Traversal in extension "Mask" (mask)
CVE-2026-77139
6.0 Medium
-
typo3 extension "telephone directory"
Broken Access Control in extension "Telephone Directory" (telephonedirectory)
CVE-2026-77140
8.7 High
-
typo3 extension "industry directory"
Broken Access Control in extension "Industry Directory" (yellowpages2)
CVE-2026-77142
8.8 High
-
typo3 extension "club directory"
Broken Access Control in extension "Club Directory" (clubdirectory)
CVE-2026-77141
8.8 High
-
typo3 extension "forum"
Broken Access Control in extension "Forum" (pforum)
CVE-2026-77143
8.8 High
-
typo3 extension "events 2"
Broken Access Control in extension "Events 2" (events2)
CVE-2026-77144
7.1 High
-
typo3 extension "events 2"
Broken Access Control in extension "Events 2" (events2)
CVE-2026-77145
7.1 High
-
typo3 extension "femanager"
Broken Access Control in extension "femanager" (femanager)
CVE-2026-77146
8.3 High
- Show olderLoading…