https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T11:13:26.561343+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0722 certfr-2026-avi-0722 — De multiples vulnérabilités ont été découvertes dans Typo3. Certaines d'entre elles permettent à un attaquant de provoq… 2026-10-02T11:13:26.565157+00:00 certfr-2026-avi-0722 https://cve.radiocsirt.org/vuln/euvd-2026-337868 EUVD-2026-337868 2026-10-02T11:13:26.565233+00:00 EUVD-2026-337868 https://cve.radiocsirt.org/vuln/fkie_cve-2026-47350 fkie_cve-2026-47350 2026-10-02T11:13:26.565262+00:00

Backend users were able to move records to a different page without having edit permissions on the source page. This issue affects TYPO3 CMS versions 13.0.0-13.4.30 and 14.0.0-14.3.2.

 https://cve.radiocsirt.org/vuln/ghsa-qcmw-6rm2-5x78 GHSA-qcmw-6rm2-5x78 — TYPO3 CMS has Broken Access Control in its DataHandler 2026-10-02T11:13:26.565293+00:00

Affected: Packagist: typo3/cms-core

### Problem Backend users were able to move records to a different page without having edit permissions on the source page.

### Solution Update to TYPO3 versions 13.4.31 LTS, 14.3.3 LTS that fix the problem described.

### Credits TYPO3 CMS thanks Hyunseo Shin for reporting this issue, and TYPO3 security team member Torben Hansen for fixing it.

### Resources * [TYPO3-CORE-SA-2026-012](https://typo3.org/security/advisory/typo3-core-sa-2026-012)

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1835 WID-SEC-W-2026-1835 — TYPO3 Core: Mehrere Schwachstellen 2026-10-02T11:13:26.565322+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in TYPO3 Core ausnutzen, um Sicherheitsbeschränkungen zu umgehen, Benutzer auf schädliche Websites umzuleiten, beliebigen Code auszuführen, Berechtigungen zu eskalieren oder andere Auswirkungen zu verursachen.