Skip to contentTypo3 Cms vulnerabilities
- typo3 cmsTYPO3 CMS - Security Misconfiguration in Form FrameworkCVE-2026-1091626.3 Medium
- typo3 cmsTYPO3 CMS - Information Disclosure via Backend Localization WizardCVE-2026-771325.3 Medium
- typo3 cmsTYPO3 CMS - Missing Authorization in lowlevel commandsCVE-2026-854007.5 High
- typo3 cmsTYPO3 CMS - Broken Access Control in Backend and Install ToolCVE-2026-19418Fix available7.3 High
- typo3 cmsTYPO3 CMS - Unrestricted File Upload in Form FrameworkCVE-2026-15305Fix available6.3 Medium
- typo3 cmsTYPO3 CMS - Broken Access Control in Media ModuleCVE-2026-49742Fix available7.1 High
- typo3 cmsTYPO3 CMS - Privilege Escalation & SQL Injection in Form FrameworkCVE-2026-49741Fix available8.7 High
- typo3 cmsTYPO3 CMS - Insecure Deserialization in Core APICVE-2026-49740Fix available6.3 Medium
- typo3 cmsTYPO3 CMS - Broken Access Control in File Abstraction LayerCVE-2026-49738Fix available2.1 Low
- typo3 cmsTYPO3 CMS - Broken Access Control in Backend APICVE-2026-47352Fix available5.3 Medium
- typo3 cmsTYPO3 CMS - Broken Access Control in ClipboardCVE-2026-47351Fix available5.3 Medium
- typo3 cmsTYPO3 CMS - Broken Access Control in DataHandlerCVE-2026-47350Fix available5.3 Medium
- typo3 cmsTYPO3 CMS - Broken Access Control in RecyclerCVE-2026-47349Fix available5.3 Medium
- typo3 cmsTYPO3 CMS - Cross-Site Scripting in Indexed SearchCVE-2026-47348Fix available5.1 Medium
- typo3 cmsTYPO3 CMS - Open Redirect in Core UtilitiesCVE-2026-47347Fix available5.3 Medium
- typo3 cmsTYPO3 CMS - Broken Access Control in Form FrameworkCVE-2026-47346Fix available7.6 High
- typo3 cmsTYPO3 CMS - Destructive Actions on File Mount FoldersCVE-2026-47343Fix available7.2 High
- typo3 cmsTYPO3 CMS - Broken Access Control in Form FrameworkCVE-2026-11607Fix available7.6 High
- typo3, typo3 cms +1 moreTYPO3 CMS Stores Cleartext Password in User Settings ModuleCVE-2026-6553Fix available7.3 High
- typo3, typo3 cms +1 moreTYPO3 CMS Allows Insecure Deserialization via Mailer File SpoolCVE-2026-0859Fix available5.2 Medium
- typo3, typo3 cms +1 moreTYPO3 CMS Allows Broken Access Control in Recycler ModuleCVE-2025-59022Fix available7.1 High
- typo3, typo3 cms +1 moreTYPO3 CMS Allows Broken Access Control in Redirects ModuleCVE-2025-59021Fix available5.3 Medium
- typo3, typo3 cms +1 moreTYPO3 CMS Allows Broken Access Control in Edit Document ControllerCVE-2025-59020Fix available5.3 Medium
- typo3, typo3 cms +1 moreInformation Disclosure via CSV DownloadCVE-2025-59019Fix available5.3 Medium
- typo3, typo3 cms +1 moreInformation Disclosure in Workspaces ModuleCVE-2025-59018Fix available7.1 High
- typo3, typo3 cms +1 moreBroken Access Control in Backend AJAX RoutesCVE-2025-59017Fix available5.3 Medium
- typo3, typo3 cms +1 moreInformation Disclosure via File Abstraction LayerCVE-2025-59016Fix available5.3 Medium
- typo3, typo3 cms +1 moreInsufficient Entropy in Password GenerationCVE-2025-59015Fix available6.3 Medium
- typo3, typo3 cms +1 moreDenial of Service in TYPO3 Bookmark ToolbarCVE-2025-59014Fix available5.1 Medium
- typo3, typo3 cms +1 moreOpen Redirect in TYPO3 CMSCVE-2025-59013Fix available5.3 Medium
- typo3, typo3 cms +1 moreMissing Required Cryptographic Step Leading to Sensitive Information Disclosure in TYPO3 CMSCVE-2020-15098Fix available8.8 High
- typo3, typo3 cms +1 moreExposure of Sensitive Information to an Unauthorized Actor in TYPO3 CMSCVE-2020-15099Fix available8.1 High
- typo3, typo3 cms +1 moreCross-Site Request Forgery in TYPO3 CMSCVE-2020-11069Fix available8.0 High
- typo3, typo3 cms +1 moreDeserialization of Untrusted Data in TYPO3 CMSCVE-2020-11067Fix available8.8 High
- typo3, typo3 cms +1 moreImproperly Controlled Modification of Dynamically-Determined Object Attributes in TYPO3 CMSCVE-2020-11066Fix available8.7 High
- typo3, typo3 cms +1 moreCross-Site Scripting in TYPO3 CMSCVE-2020-11065Fix available5.4 Medium
- typo3, typo3 cms +1 moreCross-Site Scripting in TYPO3 CMSCVE-2020-11064Fix available5.4 Medium
- typo3, typo3 cms +1 moreObservable Response Discrepancy in TYPO3 CMSCVE-2020-11063Fix available3.7 Low