https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T11:01:59.003181+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-252541 EUVD-2026-252541 2026-10-03T11:01:59.052673+00:00 EUVD-2026-252541 https://cve.radiocsirt.org/vuln/fkie_cve-2025-59018 fkie_cve-2025-59018 2026-10-03T11:01:59.052704+00:00

Missing authorization checks in the Workspace Module of TYPO3 CMS versions 9.0.0‑9.5.54, 10.0.0‑10.4.53, 11.0.0‑11.5.47, 12.0.0‑12.4.36, and 13.0.0‑13.4.17 allow backend users to directly invoke the corresponding AJAX backend route to disclose sensitive information without having access.

 https://cve.radiocsirt.org/vuln/ghsa-w2pf-7q5w-2cgw GHSA-w2pf-7q5w-2cgw — TYPO3 Workspaces Module Information Disclosure 2026-10-03T11:01:59.052738+00:00

Affected: Packagist: typo3/cms-workspaces

Missing authorization checks in the Workspace Module of TYPO3 CMS versions 9.0.0‑9.5.54, 10.0.0‑10.4.53, 11.0.0‑11.5.47, 12.0.0‑12.4.36, and 13.0.0‑13.4.17 allow backend users to directly invoke the corresponding AJAX backend route to disclose sensitive information without having access.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2001 WID-SEC-W-2025-2001 — TYPO3 Core: Mehrere Schwachstellen 2026-10-03T11:01:59.052766+00:00

Ein entfernter anonymer oder authentisierter Angreifer kann mehrere Schwachstellen im TYPO3 Core ausnutzen, um Phishing-Angriffe durchzuführen, vertrauliche Informationen offenzulegen, Daten zu manipulieren, Sicherheitsmaßnahmen zu umgehen und einen Denial-of-Service-Zustand zu verursachen.