https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-21T15:54:33.939650+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-99599 EUVD-2026-99599 2026-10-21T15:54:33.942919+00:00 EUVD-2026-99599 https://cve.radiocsirt.org/vuln/fkie_cve-2014-3946 fkie_cve-2014-3946 2026-10-21T15:54:33.942965+00:00

The query caching functionality in the Extbase Framework component in TYPO3 6.2.0 before 6.2.3 does not properly validate group permissions, which allows remote authenticated users to read arbitrary queries via unspecified vectors.

 https://cve.radiocsirt.org/vuln/ghsa-vccp-5v5h-p8m6 GHSA-vccp-5v5h-p8m6 — Typo3 Information Disclosure 2026-10-21T15:54:33.943009+00:00

Affected: Packagist: typo3/cms

Failing to respect user groups of logged in users when caching queries, Extbase is susceptible to information disclosure. The query caching (introduced in Extbase 6.2) used to cache queries that query results for a specific user group were presented to a different group.

 https://cve.radiocsirt.org/vuln/gsd-2014-3946 gsd-2014-3946 2026-10-21T15:54:33.943043+00:00 gsd-2014-3946