https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:23:51.160860+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-319425 EUVD-2026-319425 2026-10-03T06:23:51.163674+00:00 EUVD-2026-319425 https://cve.radiocsirt.org/vuln/fkie_cve-2026-46723 fkie_cve-2026-46723 2026-10-03T06:23:51.163706+00:00

The additional_tables configuration of the page and tt_content indexers accepts arbitrary table and field names. A backend user with permission to edit indexer configurations can copy sensitive data from internal TYPO3 tables into the search index.

 https://cve.radiocsirt.org/vuln/ghsa-67j3-jmm3-32xc GHSA-67j3-jmm3-32xc — TYPO3 ke_search path traversal from arbitrary table configuration input 2026-10-03T06:23:51.163736+00:00

Affected: Packagist: tpwd/ke_search

In TYPO3 faceted fulltext search (`ke_search`), the`additional_tables` configuration of the page and `tt_content` indexers accept arbitrary table and field names. A backend user with permission to edit indexer configurations can copy sensitive data from internal TYPO3 tables into the search index. This has been patched in versions 7.0.1, 6.6.1, 5.6.2 and 4.6.7.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1585 WID-SEC-W-2026-1585 — TYPO3 Extensions: Mehrere Schwachstellen 2026-10-03T06:23:51.163762+00:00

Ein Angreifer kann mehrere Schwachstellen in TYPO3 Extensions ausnutzen, um beliebigen Programmcode auszuführen, um einen SQL-Injection Angriff durchzuführen, um Informationen offenzulegen, und um Sicherheitsvorkehrungen zu umgehen.