https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T19:13:29.119291+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0028 certfr-2025-avi-0028 — De multiples vulnérabilités ont été découvertes dans les produits Typo3. Certaines d'entre elles permettent à un attaqu… 2026-10-07T19:13:29.122629+00:00 certfr-2025-avi-0028 https://cve.radiocsirt.org/vuln/euvd-2026-210579 EUVD-2026-210579 2026-10-07T19:13:29.122666+00:00 EUVD-2026-210579 https://cve.radiocsirt.org/vuln/fkie_cve-2024-55891 fkie_cve-2024-55891 2026-10-07T19:13:29.122681+00:00

TYPO3 is a free and open source Content Management Framework. It has been discovered that the install tool password has been logged as plaintext in case the password hashing mechanism used for the password was incorrect. Users are advised to update to TYPO3 versions 13.4.3 ELTS which fixes the problem described. There are no known workarounds for this vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-38x7-cc6w-j27q GHSA-38x7-cc6w-j27q — TYPO3 Information Disclosure via Exception Handling/Logger 2026-10-07T19:13:29.122710+00:00

Affected: Packagist: typo3/cms-install

### Problem It has been discovered that the install tool password has been logged as plaintext in case the password hashing mechanism used for the password was incorrect.

### Solution Update to TYPO3 versions 13.4.3 LTS that fixes the problem described.

### Credits Thanks to TYPO3 core & security team member Oliver Hader who reported and fixed the issue.

### References * [TYPO3-CORE-SA-2025-001](https://typo3.org/security/advisory/typo3-core-sa-2025-001)

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0055 WID-SEC-W-2025-0055 — TYPO3 Core: Mehrere Schwachstellen 2026-10-07T19:13:29.122737+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in TYPO3 Core ausnutzen, um Dateien zu manipulieren und vertrauliche Informationen preiszugeben.