https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T10:37:23.200939+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-324207 EUVD-2026-324207 2026-10-03T10:37:23.271209+00:00 EUVD-2026-324207 https://cve.radiocsirt.org/vuln/fkie_cve-2026-46724 fkie_cve-2026-46724 2026-10-03T10:37:23.271268+00:00

The file indexer does not normalize the configured directory path. A backend user with permission to edit indexer configurations can index documents from arbitrary locations on the server file system through path traversal sequences.

 https://cve.radiocsirt.org/vuln/ghsa-c72x-mc2p-wv7x GHSA-c72x-mc2p-wv7x — TYPO3 ke_search path traversal due to lack of normalization on config directory from file indexer 2026-10-03T10:37:23.271304+00:00

Affected: Packagist: tpwd/ke_search

In TYPO3 faceted fulltext search (`ke_search`), the file indexer does not normalize the configured directory path. A backend user with permission to edit indexer configurations can index documents from arbitrary locations on the server file system through path traversal sequences. This has been patched in versions 7.0.1, 6.6.1, 5.6.2 and 4.6.7.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1585 WID-SEC-W-2026-1585 — TYPO3 Extensions: Mehrere Schwachstellen 2026-10-03T10:37:23.271333+00:00

Ein Angreifer kann mehrere Schwachstellen in TYPO3 Extensions ausnutzen, um beliebigen Programmcode auszuführen, um einen SQL-Injection Angriff durchzuführen, um Informationen offenzulegen, und um Sicherheitsvorkehrungen zu umgehen.