https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-19T19:00:06.894446+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-107355 EUVD-2026-107355 2026-10-19T19:00:06.944226+00:00 EUVD-2026-107355 https://cve.radiocsirt.org/vuln/fkie_cve-2013-4321 fkie_cve-2013-4321 2026-10-19T19:00:06.944262+00:00

The File Abstraction Layer (FAL) in TYPO3 6.0.x before 6.0.8 and 6.1.x before 6.1.4 allows remote authenticated editors to execute arbitrary PHP code via unspecified characters in the file extension when renaming a file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-4250.

 https://cve.radiocsirt.org/vuln/ghsa-m76j-69c2-c3m8 GHSA-m76j-69c2-c3m8 — TYPO3 vulnerable to remote authenticated arbitrary code execution 2026-10-19T19:00:06.944295+00:00

Affected: Packagist: typo3/cms

The File Abstraction Layer (FAL) in TYPO3 6.0.x before 6.0.9 and 6.1.x before 6.1.4 allows remote authenticated editors to execute arbitrary PHP code via unspecified characters in the file extension when renaming a file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-4250.

 https://cve.radiocsirt.org/vuln/gsd-2013-4321 gsd-2013-4321 2026-10-19T19:00:06.944320+00:00 gsd-2013-4321