Typo3 Cms
TYPO3 · 37 CVEs
TYPO3 CMS - Information Disclosure via Backend Localization Wizard
Sep 8, 2026
TYPO3 CMS - Missing Authorization in lowlevel commands
Sep 8, 2026
TYPO3 CMS - Broken Access Control in Backend and Install Tool
Aug 11, 2026
TYPO3 CMS - Unrestricted File Upload in Form Framework
Jul 14, 2026
TYPO3 CMS - Broken Access Control in Media Module
Jun 9, 2026
TYPO3 CMS - Privilege Escalation & SQL Injection in Form Framework
Jun 9, 2026
TYPO3 CMS - Insecure Deserialization in Core API
Jun 9, 2026
TYPO3 CMS - Broken Access Control in File Abstraction Layer
Jun 9, 2026
TYPO3 CMS - Broken Access Control in Backend API
Jun 9, 2026
TYPO3 CMS - Broken Access Control in Clipboard
Jun 9, 2026
TYPO3 CMS - Broken Access Control in DataHandler
Jun 9, 2026
TYPO3 CMS - Broken Access Control in Recycler
Jun 9, 2026
TYPO3 CMS - Cross-Site Scripting in Indexed Search
Jun 9, 2026
TYPO3 CMS - Open Redirect in Core Utilities
Jun 9, 2026
TYPO3 CMS - Broken Access Control in Form Framework
Jun 9, 2026
TYPO3 CMS - Destructive Actions on File Mount Folders
Jun 9, 2026
TYPO3 CMS - Broken Access Control in Form Framework
Jun 9, 2026
TYPO3 CMS Stores Cleartext Password in User Settings Module
Apr 21, 2026
TYPO3 CMS Allows Insecure Deserialization via Mailer File Spool
Jan 13, 2026
TYPO3 CMS Allows Broken Access Control in Recycler Module
Jan 13, 2026
TYPO3 CMS Allows Broken Access Control in Redirects Module
Jan 13, 2026
TYPO3 CMS Allows Broken Access Control in Edit Document Controller
Jan 13, 2026
Information Disclosure via CSV Download
Sep 9, 2025
Information Disclosure in Workspaces Module
Sep 9, 2025
Broken Access Control in Backend AJAX Routes
Sep 9, 2025
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-77132 | TYPO3 CMS - Information Disclosure via Backend Localization Wizard | MEDIUM | 0.43% | Sep 8, 2026 |
| CVE-2026-85400 | TYPO3 CMS - Missing Authorization in lowlevel commands | HIGH | 0.46% | Sep 8, 2026 |
| CVE-2026-19418 | TYPO3 CMS - Broken Access Control in Backend and Install Tool | HIGH | 0.24% | Aug 11, 2026 |
| CVE-2026-15305 | TYPO3 CMS - Unrestricted File Upload in Form Framework | MEDIUM | 0.25% | Jul 14, 2026 |
| CVE-2026-49742 | TYPO3 CMS - Broken Access Control in Media Module | HIGH | 0.46% | Jun 9, 2026 |
| CVE-2026-49741 | TYPO3 CMS - Privilege Escalation & SQL Injection in Form Framework | HIGH | 0.37% | Jun 9, 2026 |
| CVE-2026-49740 | TYPO3 CMS - Insecure Deserialization in Core API | MEDIUM | 0.59% | Jun 9, 2026 |
| CVE-2026-49738 | TYPO3 CMS - Broken Access Control in File Abstraction Layer | LOW | 0.52% | Jun 9, 2026 |
| CVE-2026-47352 | TYPO3 CMS - Broken Access Control in Backend API | MEDIUM | 0.41% | Jun 9, 2026 |
| CVE-2026-47351 | TYPO3 CMS - Broken Access Control in Clipboard | MEDIUM | 0.41% | Jun 9, 2026 |
| CVE-2026-47350 | TYPO3 CMS - Broken Access Control in DataHandler | MEDIUM | 0.41% | Jun 9, 2026 |
| CVE-2026-47349 | TYPO3 CMS - Broken Access Control in Recycler | MEDIUM | 0.41% | Jun 9, 2026 |
| CVE-2026-47348 | TYPO3 CMS - Cross-Site Scripting in Indexed Search | MEDIUM | 0.47% | Jun 9, 2026 |
| CVE-2026-47347 | TYPO3 CMS - Open Redirect in Core Utilities | MEDIUM | 0.48% | Jun 9, 2026 |
| CVE-2026-47346 | TYPO3 CMS - Broken Access Control in Form Framework | HIGH | 0.44% | Jun 9, 2026 |
| CVE-2026-47343 | TYPO3 CMS - Destructive Actions on File Mount Folders | HIGH | 0.41% | Jun 9, 2026 |
| CVE-2026-11607 | TYPO3 CMS - Broken Access Control in Form Framework | HIGH | 0.24% | Jun 9, 2026 |
| CVE-2026-6553 | TYPO3 CMS Stores Cleartext Password in User Settings Module | HIGH | 0.27% | Apr 21, 2026 |
| CVE-2026-0859 | TYPO3 CMS Allows Insecure Deserialization via Mailer File Spool | MEDIUM | 0.19% | Jan 13, 2026 |
| CVE-2025-59022 | TYPO3 CMS Allows Broken Access Control in Recycler Module | HIGH | 0.42% | Jan 13, 2026 |
| CVE-2025-59021 | TYPO3 CMS Allows Broken Access Control in Redirects Module | MEDIUM | 0.27% | Jan 13, 2026 |
| CVE-2025-59020 | TYPO3 CMS Allows Broken Access Control in Edit Document Controller | MEDIUM | 0.32% | Jan 13, 2026 |
| CVE-2025-59019 | Information Disclosure via CSV Download | MEDIUM | 0.24% | Sep 9, 2025 |
| CVE-2025-59018 | Information Disclosure in Workspaces Module | HIGH | 0.29% | Sep 9, 2025 |
| CVE-2025-59017 | Broken Access Control in Backend AJAX Routes | MEDIUM | 0.30% | Sep 9, 2025 |
Showing 1 to 25 of 37 CVEs