https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:40:42.317107+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-324206 EUVD-2026-324206 2026-10-03T06:40:42.362508+00:00 EUVD-2026-324206 https://cve.radiocsirt.org/vuln/fkie_cve-2026-46722 fkie_cve-2026-46722 2026-10-03T06:40:42.362543+00:00

The OOXML parsing of the file indexer does not disable external entity resolution. A crafted xlsx or pptx document placed in an indexed directory can cause local files to be read or outbound HTTP requests to be performed, with the retrieved content being written to the search index.

 https://cve.radiocsirt.org/vuln/ghsa-fq39-62gx-8hqx GHSA-fq39-62gx-8hqx — TYPO3 ke_search XML External Entity Injection 2026-10-03T06:40:42.362575+00:00

Affected: Packagist: tpwd/ke_search

In TYPO3 faceted fulltext search (`ke_search`), the OOXML parsing of the file indexer does not disable external entity resolution. A crafted xlsx or pptx document placed in an indexed directory can cause local files to be read or outbound HTTP requests to be performed, with the retrieved content being written to the search index. This has been patched in versions 7.0.1, 6.6.1, 5.6.2 and 4.6.7.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1585 WID-SEC-W-2026-1585 — TYPO3 Extensions: Mehrere Schwachstellen 2026-10-03T06:40:42.362601+00:00

Ein Angreifer kann mehrere Schwachstellen in TYPO3 Extensions ausnutzen, um beliebigen Programmcode auszuführen, um einen SQL-Injection Angriff durchzuführen, um Informationen offenzulegen, und um Sicherheitsvorkehrungen zu umgehen.