https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 06:23:36 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-319425 EUVD-2026-319425 https://cve.radiocsirt.org/vuln/euvd-2026-319425 https://cve.radiocsirt.org/vuln/fkie_cve-2026-46723 <p>The additional_tables configuration of the page and tt_content indexers accepts arbitrary table and field names. A backend user with permission to edit indexer configurations can copy sensitive data from internal TYPO3 tables into the search index.</p> <p>The additional_tables configuration of the page and tt_content indexers accepts arbitrary table and field names. A backend user with permission to edit indexer configurations can copy sensitive data from internal TYPO3 tables into the search index.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-46723 https://cve.radiocsirt.org/vuln/ghsa-67j3-jmm3-32xc <p><strong>Affected:</strong> Packagist: tpwd/ke_search</p> <p>In TYPO3 faceted fulltext search (`ke_search`), the`additional_tables` configuration of the page and `tt_content` indexers accept arbitrary table and field names. A backend user with permission to edit indexer configurations can copy sensitive data from internal TYPO3 tables into the search index. This has been patched in versions 7.0.1, 6.6.1, 5.6.2 and 4.6.7.</p> <p><strong>Affected:</strong> Packagist: tpwd/ke_search</p> <p>In TYPO3 faceted fulltext search (`ke_search`), the`additional_tables` configuration of the page and `tt_content` indexers accept arbitrary table and field names. A backend user with permission to edit indexer configurations can copy sensitive data from internal TYPO3 tables into the search index. This has been patched in versions 7.0.1, 6.6.1, 5.6.2 and 4.6.7.</p> https://cve.radiocsirt.org/vuln/ghsa-67j3-jmm3-32xc https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1585 <p>Ein Angreifer kann mehrere Schwachstellen in TYPO3 Extensions ausnutzen, um beliebigen Programmcode auszuführen, um einen SQL-Injection Angriff durchzuführen, um Informationen offenzulegen, und um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in TYPO3 Extensions ausnutzen, um beliebigen Programmcode auszuführen, um einen SQL-Injection Angriff durchzuführen, um Informationen offenzulegen, und um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1585