https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:52:51.962569+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2022-avi-1097 certfr-2022-avi-1097 — De multiples vulnérabilités ont été découvertes dans Typo3 cms-core. Elles permettent à un attaquant de provoquer une e… 2026-10-02T19:52:52.035941+00:00 certfr-2022-avi-1097 https://cve.radiocsirt.org/vuln/euvd-2026-232224 EUVD-2026-232224 2026-10-02T19:52:52.035981+00:00 EUVD-2026-232224 https://cve.radiocsirt.org/vuln/fkie_cve-2022-23501 fkie_cve-2022-23501 2026-10-02T19:52:52.035997+00:00

TYPO3 is an open source PHP based web content management system. In versions prior to 8.7.49, 9.5.38, 10.4.33, 11.5.20, and 12.1.1 TYPO3 is vulnerable to Improper Authentication. Restricting frontend login to specific users, organized in different storage folders (partitions), can be bypassed. A potential attacker might use this ambiguity in usernames to get access to a different account - however, credentials must be known to the adversary. This issue is patched in versions 8.7.49 ELTS, 9.5.38 ELTS, 10.4.33, 11.5.20, 12.1.1.

 https://cve.radiocsirt.org/vuln/ghsa-jfp7-79g7-89rf GHSA-jfp7-79g7-89rf — TYPO3 CMS vulnerable to Weak Authentication in Frontend Login 2026-10-02T19:52:52.036028+00:00

Affected: Packagist: typo3/cms-core, Packagist: typo3/cms

### Problem Restricting frontend login to specific users, organized in different storage folders (partitions), can be bypassed. A potential attacker might use this ambiguity in usernames to get access to a different account - however, credentials must be known to the adversary.

### Solution Update to TYPO3 versions 8.7.49 ELTS, 9.5.38 ELTS, 10.4.33, 11.5.20, 12.1.1 that fix the problem described above.

### References * [TYPO3-CORE-SA-2022-013](https://typo3.org/security/advisory/typo3-core-sa-2022-013)

 https://cve.radiocsirt.org/vuln/gsd-2022-23501 gsd-2022-23501 2026-10-02T19:52:52.036064+00:00 gsd-2022-23501 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2299 WID-SEC-W-2022-2299 — TYPO3 Core: Mehrere Schwachstellen 2026-10-02T19:52:52.036077+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in TYPO3 Core ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial of Service Zustand herzustellen.