https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T18:01:22.924733+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-05967 bdu:2025-05967 2026-10-04T18:01:23.001781+00:00 bdu:2025-05967 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0429 certfr-2025-avi-0429 — De multiples vulnérabilités ont été découvertes dans les produits Typo3. Certaines d'entre elles permettent à un attaqu… 2026-10-04T18:01:23.001820+00:00 certfr-2025-avi-0429 https://cve.radiocsirt.org/vuln/euvd-2026-240212 EUVD-2026-240212 2026-10-04T18:01:23.001839+00:00 EUVD-2026-240212 https://cve.radiocsirt.org/vuln/fkie_cve-2025-47940 fkie_cve-2025-47940 2026-10-04T18:01:23.001852+00:00

TYPO3 is an open source, PHP based web content management system. Starting in version 10.0.0 and prior to versions 10.4.50 ELTS, 11.5.44 ELTS, 12.4.31 LTS, and 13.4.12 LTS, administrator-level backend users without system maintainer privileges can escalate their privileges and gain system maintainer access. Exploiting this vulnerability requires a valid administrator account. Users should update to TYPO3 version 10.4.50 ELTS, 11.5.44 ELTS, 12.4.31 LTS, or 13.4.12 LTS to fix the problem.

 https://cve.radiocsirt.org/vuln/ghsa-6frx-j292-c844 GHSA-6frx-j292-c844 — TYPO3 Allows Privilege Escalation to System Maintainer 2026-10-04T18:01:23.001884+00:00

Affected: Packagist: typo3/cms-core

### Problem Administrator-level backend users without system maintainer privileges can escalate their privileges and gain system maintainer access. Exploiting this vulnerability requires a valid administrator account.

### Solution Update to TYPO3 versions 10.4.50 ELTS, 11.5.44 ELTS, 12.4.31 LTS, 13.4.12 LTS that fix the problem described.

### Credits Thanks to Alexander Künzl for reporting this issue, and to TYPO3 core & security team member Oliver Hader for fixing it.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1106 WID-SEC-W-2025-1106 — TYPO3 Core: Mehrere Schwachstellen 2026-10-04T18:01:23.001915+00:00

Ein Angreifer kann mehrere Schwachstellen in TYPO3 Core ausnutzen, um Dateien zu manipulieren, Informationen auszuspähen, Sicherheitsvorkehrungen zu umgehen, einen Denial-of-Service auszulösen oder seine Privilegien zu erweitern.