https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T02:05:36.592466+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2024-avi-0121 certfr-2024-avi-0121 — De multiples vulnérabilités ont été découvertes dans <span class="textit">les produits Typo3</span>. Certaines d'entre… 2026-10-17T02:05:36.596889+00:00 certfr-2024-avi-0121 https://cve.radiocsirt.org/vuln/euvd-2026-234984 EUVD-2026-234984 2026-10-17T02:05:36.596926+00:00 EUVD-2026-234984 https://cve.radiocsirt.org/vuln/fkie_cve-2024-25120 fkie_cve-2024-25120 2026-10-17T02:05:36.596941+00:00

TYPO3 is an open source PHP based web content management system released under the GNU GPL. The TYPO3-specific `t3://` URI scheme could be used to access resources outside of the users' permission scope. This encompassed files, folders, pages, and records (although only if a valid link-handling configuration was provided). Exploiting this vulnerability requires a valid backend user account. Users are advised to update to TYPO3 versions 8.7.57 ELTS, 9.5.46 ELTS, 10.4.43 ELTS, 11.5.35 LTS, 12.4.11 LTS, 13.0.1 that fix the problem described. There are no known workarounds for this issue.

 https://cve.radiocsirt.org/vuln/ghsa-wf85-8hx9-gj7c GHSA-wf85-8hx9-gj7c — TYPO3 vulnerable to Improper Access Control of Resources Referenced by t3:// URI Scheme 2026-10-17T02:05:36.596972+00:00

Affected: Packagist: typo3/cms-core

### Problem The TYPO3-specific [`t3://` URI scheme](https://docs.typo3.org/m/typo3/reference-typoscript/main/en-us/Functions/Typolink.html#resource-references) could be used to access resources outside of the users' permission scope. This encompassed files, folders, pages, and records (although only if a valid link-handling configuration was provided). Exploiting this vulnerability requires a valid backend user account.

### Solution Update to TYPO3 versions 8.7.57 ELTS, 9.5.46 ELTS, 10.4.43 ELTS, 11.5.35 LTS, 12.4.11 LTS, 13.0.1 that fix the problem described.

### Credits Thanks to Richie Lee who reported this issue and to TYPO3 core & security team member Benjamin Franzke who fixed the issue.

### References * [TYPO3-CORE-SA-2024-005](https://typo3.org/security/advisory/typo3-core-sa-2024-005)

 https://cve.radiocsirt.org/vuln/gsd-2024-25120 gsd-2024-25120 2026-10-17T02:05:36.597006+00:00 gsd-2024-25120 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0357 WID-SEC-W-2024-0357 — TYPO3 Core und TYPO3 Extension: Mehrere Schwachstellen 2026-10-17T02:05:36.597018+00:00

Ein entfernter, authentifizierter Angreifer kann mehrere Schwachstellen in TYPO3 Core und TYPO3 Extension ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen oder vertrauliche Informationen offenzulegen.