TYPO3 vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
456 matching records
- High7.1In versions running on TYPO3 10 and 11, the configured OpenAI API key is embedded in every backend page, so that the editor plugin can contact the OpenAI service direc…Check if you run itEPSS 0.35%Oct 20, 2026
- Medium6.3The extension no longer applied its access protection to files in file storages that use a non-default relative base path.Check if you run itEPSS 0.47%Oct 20, 2026
- UnknownMerge pull request #825 from eliashaeussler/typo3-core-2026-10Check if you run itEPSS 0.37%Oct 13, 2026
- UnknownCVE-2026-56096 is listed by Updated TYPO3 ext:solr affected versions.Check if you run itEPSS 0.43%Sep 17, 2026
- UnknownCVE-2026-56095 is listed by Updated TYPO3 ext:solr affected versions.Check if you run itEPSS 0.32%Sep 17, 2026
- UnknownCVE-2026-56094 is listed by Updated TYPO3 ext:solr affected versions.Check if you run itEPSS 0.33%Sep 17, 2026
- UnknownCVE-2026-56093 is listed by Updated TYPO3 ext:solr affected versions.Check if you run itEPSS 0.31%Sep 17, 2026
- UnknownCVE-2026-56092 is listed by Updated TYPO3 ext:solr affected versions.Check if you run itEPSS 0.29%Sep 17, 2026
- UnknownImproper Neutralization of Special Elements Used in a Template EnginePatch nowKEVEPSS 0.97%Aug 25, 2026
- High7.1The Crawler extension passes the X-T3Crawler-Meta response header from crawled URLs directly to PHP's unserialize().Check if you run itEPSS 0.39%May 19, 2026
- Critical9.2The extension passes an attacker-controlled cookie directly to PHP's unserialize() without safely processing the input.Check if you run itEPSS 2.63%May 19, 2026
- Medium5.9The additional_tables configuration of the page and tt_content indexers accepts arbitrary table and field names.Check if you run itEPSS 0.32%May 19, 2026
- High7.3Changing backend users' passwords via the user settings module results in storing the cleartext password in the uc and user_settings fields of the be_users database table.Check if you run itEPSS 0.17%Apr 21, 2026
- Medium5.2The extension fails to properly define allowed classes used when deserializing transport failure metadata.Check if you run itEPSS 0.23%Mar 17, 2026
- Medium5.2TYPO3's mail‑file spool deserialization flaw lets local users with write access to the spool directory craft a malicious file that is deserialized during the mailer:spool:send commCheck if you run itEPSS 0.18%Jan 13, 2026
- High7.1Backend users who had access to the recycler module could delete arbitrary data from any database table defined in the TCA - regardless of whether they had permission to that partiCheck if you run itEPSS 0.42%Jan 13, 2026
- Medium5.3Backend users with access to the redirects module and write permission on the sys_redirect table were able to read, create, and modify any redirect record without restriction to thCheck if you run itEPSS 0.27%Jan 13, 2026
- Medium5.3By exploiting the defVals parameter, attackers could bypass field‑level access checks during record creation in the TYPO3 backend.Check if you run itEPSS 0.31%Jan 13, 2026
- High8.2Improper Authentication vulnerability in TYPO3 Extension "Modules" codingms/modules.This issue affects Extension "Modules": before 4.3.11, from 5.0.0 before 5.7.4, from 6.0.0 beforCheck if you run itEPSS 0.36%Nov 12, 2025
- Low2.3The extension "Form to Database" is susceptible to Cross-Site Scripting.Check if you run itEPSS 0.33%Sep 16, 2025
- Medium5.3Missing authorization checks in the CSV download feature of TYPO3 CMS versions 11.0.0‑11.5.47, 12.0.0‑12.4.36, and 13.0.0‑13.4.17 allow backend users to disclose information from aCheck if you run itEPSS 0.24%Sep 9, 2025
- High7.1Missing authorization checks in the Workspace Module of TYPO3 CMS versions 9.0.0‑9.5.54, 10.0.0‑10.4.53, 11.0.0‑11.5.47, 12.0.0‑12.4.36, and 13.0.0‑13.4.17 allow backend users to dCheck if you run itEPSS 0.29%Sep 9, 2025
- High8.6The ns_backup extension through 13.0.2 for TYPO3 allows command injection.Check if you run itEPSS 1.09%Sep 2, 2025
- Medium5.3The femanager extension for TYPO3 allows Insecure Direct Object Reference resulting in unauthorized modification of userdata.Check if you run itEPSS 0.25%Jul 22, 2025
- Medium6.0The powermail extension for TYPO3 allows Insecure Direct Object Reference resulting in download of arbitrary files from the webserver.Check if you run itEPSS 0.33%Jul 22, 2025