Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 09:16:47 +0000 EUVD-2026-324207 https://cve.radiocsirt.org/vuln/euvd-2026-324207 EUVD-2026-324207 https://cve.radiocsirt.org/vuln/euvd-2026-324207 fkie_cve-2026-46724 https://cve.radiocsirt.org/vuln/fkie_cve-2026-46724 <p>The file indexer does not normalize the configured directory path. A backend user with permission to edit indexer configurations can index documents from arbitrary locations on the server file system through path traversal sequences.</p> <p>The file indexer does not normalize the configured directory path. A backend user with permission to edit indexer configurations can index documents from arbitrary locations on the server file system through path traversal sequences.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-46724 GHSA-c72x-mc2p-wv7x — TYPO3 ke_search path traversal due to lack of normalization on config directory from file indexer https://cve.radiocsirt.org/vuln/ghsa-c72x-mc2p-wv7x <p><strong>Affected:</strong> Packagist: tpwd/ke_search</p> <p>In TYPO3 faceted fulltext search (`ke_search`), the file indexer does not normalize the configured directory path. A backend user with permission to edit indexer configurations can index documents from arbitrary locations on the server file system through path traversal sequences. This has been patched in versions 7.0.1, 6.6.1, 5.6.2 and 4.6.7.</p> <p><strong>Affected:</strong> Packagist: tpwd/ke_search</p> <p>In TYPO3 faceted fulltext search (`ke_search`), the file indexer does not normalize the configured directory path. A backend user with permission to edit indexer configurations can index documents from arbitrary locations on the server file system through path traversal sequences. This has been patched in versions 7.0.1, 6.6.1, 5.6.2 and 4.6.7.</p> https://cve.radiocsirt.org/vuln/ghsa-c72x-mc2p-wv7x WID-SEC-W-2026-1585 — TYPO3 Extensions: Mehrere Schwachstellen https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1585 <p>Ein Angreifer kann mehrere Schwachstellen in TYPO3 Extensions ausnutzen, um beliebigen Programmcode auszuführen, um einen SQL-Injection Angriff durchzuführen, um Informationen offenzulegen, und um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in TYPO3 Extensions ausnutzen, um beliebigen Programmcode auszuführen, um einen SQL-Injection Angriff durchzuführen, um Informationen offenzulegen, und um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1585