https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T23:57:48.486544+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-252543 EUVD-2026-252543 2026-10-02T23:57:48.536872+00:00 EUVD-2026-252543 https://cve.radiocsirt.org/vuln/fkie_cve-2025-59019 fkie_cve-2025-59019 2026-10-02T23:57:48.536909+00:00

Missing authorization checks in the CSV download feature of TYPO3 CMS versions 11.0.0‑11.5.47, 12.0.0‑12.4.36, and 13.0.0‑13.4.17 allow backend users to disclose information from arbitrary database tables stored within the users' web mounts without having access to them.

 https://cve.radiocsirt.org/vuln/ghsa-j8vm-7q52-2m2m GHSA-j8vm-7q52-2m2m — TYPO3 CSV download feature information disclosure 2026-10-02T23:57:48.536944+00:00

Affected: Packagist: typo3/cms-backend, Packagist: typo3/cms-recordlist

Missing authorization checks in the CSV download feature of TYPO3 CMS versions 11.0.0‑11.5.47, 12.0.0‑12.4.36, and 13.0.0‑13.4.17 allow backend users to disclose information from arbitrary database tables stored within the users' web mounts without having access to them.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2001 WID-SEC-W-2025-2001 — TYPO3 Core: Mehrere Schwachstellen 2026-10-02T23:57:48.536973+00:00

Ein entfernter anonymer oder authentisierter Angreifer kann mehrere Schwachstellen im TYPO3 Core ausnutzen, um Phishing-Angriffe durchzuführen, vertrauliche Informationen offenzulegen, Daten zu manipulieren, Sicherheitsmaßnahmen zu umgehen und einen Denial-of-Service-Zustand zu verursachen.