https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:53:59.313086+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-252339 EUVD-2026-252339 2026-10-02T19:53:59.315990+00:00 EUVD-2026-252339 https://cve.radiocsirt.org/vuln/fkie_cve-2025-59017 fkie_cve-2025-59017 2026-10-02T19:53:59.316022+00:00

Missing authorization checks in the Backend Routing of TYPO3 CMS versions 9.0.0‑9.5.54, 10.0.0‑10.4.53, 11.0.0‑11.5.47, 12.0.0‑12.4.36, and 13.0.0‑13.4.17 allow backend users to directly invoke AJAX backend routes without having access to the corresponding backend modules.

 https://cve.radiocsirt.org/vuln/ghsa-2fhw-2j7m-mr4m GHSA-2fhw-2j7m-mr4m — TYPO3 backend modules have Broken Access Control 2026-10-02T19:53:59.316054+00:00

Affected: Packagist: typo3/cms-workspaces, Packagist: typo3/cms-recycler, Packagist: typo3/cms-dashboard, Packagist: typo3/cms-beuser, Packagist: typo3/cms-backend

Missing authorization checks in the Backend Routing of TYPO3 CMS versions 9.0.0‑9.5.54, 10.0.0‑10.4.53, 11.0.0‑11.5.47, 12.0.0‑12.4.36, and 13.0.0‑13.4.17 allow backend users to directly invoke AJAX backend routes without having access to the corresponding backend modules.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2001 WID-SEC-W-2025-2001 — TYPO3 Core: Mehrere Schwachstellen 2026-10-02T19:53:59.316092+00:00

Ein entfernter anonymer oder authentisierter Angreifer kann mehrere Schwachstellen im TYPO3 Core ausnutzen, um Phishing-Angriffe durchzuführen, vertrauliche Informationen offenzulegen, Daten zu manipulieren, Sicherheitsmaßnahmen zu umgehen und einen Denial-of-Service-Zustand zu verursachen.