https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-13T07:14:58.529289+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-224728 EUVD-2026-224728 2026-10-13T07:14:58.562247+00:00 EUVD-2026-224728 https://cve.radiocsirt.org/vuln/fkie_cve-2024-38874 fkie_cve-2024-38874 2026-10-13T07:14:58.562280+00:00

An issue was discovered in the events2 (aka Events 2) extension before 8.3.8 and 9.x before 9.0.6 for TYPO3. Missing access checks in the management plugin lead to an insecure direct object reference (IDOR) vulnerability with the potential to activate or delete various events for unauthenticated users.

 https://cve.radiocsirt.org/vuln/ghsa-cchp-3rq6-69wj GHSA-cchp-3rq6-69wj — events2 TYPO3 extension insecure direct object reference (IDOR) vulnerability 2026-10-13T07:14:58.562312+00:00

Affected: Packagist: jweiland/events2

An issue was discovered in the events2 (aka Events 2) extension before 8.3.8 and 9.x before 9.0.6 for TYPO3. Missing access checks in the management plugin lead to an insecure direct object reference (IDOR) vulnerability with the potential to activate or delete various events for unauthenticated users.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1399 WID-SEC-W-2024-1399 — TYPO3 Extension: Mehrere Schwachstellen 2026-10-13T07:14:58.562336+00:00

Ein entfernter authentifizierter Angreifer kann mehrere Schwachstellen in TYPO3 Extension ausnutzen, um Dateien zu manipulieren, vertrauliche Informationen preiszugeben, Sicherheitsmaßnahmen zu umgehen oder beliebigen Code auszuführen.