https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T14:24:14.361060+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-59017 CVE-2025-59017 — Broken Access Control in Backend AJAX Routes 2026-10-08T14:24:14.377048+00:00

Affected: TYPO3 CMS

Missing authorization checks in the Backend Routing of TYPO3 CMS versions 9.0.0‑9.5.54, 10.0.0‑10.4.53, 11.0.0‑11.5.47, 12.0.0‑12.4.36, and 13.0.0‑13.4.17 allow backend users to directly invoke AJAX backend routes without having access to the corresponding backend modules.