<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://cve.radiocsirt.org</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 07 Oct 2026 19:12:37 +0000</lastBuildDate>
    <item>
      <title>certfr-2025-avi-0028 — De multiples vulnérabilités ont été découvertes dans les produits Typo3. Certaines d'entre elles permettent à un attaqu…</title>
      <link>https://cve.radiocsirt.org/vuln/certfr-2025-avi-0028</link>
      <description>certfr-2025-avi-0028</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/certfr-2025-avi-0028</guid>
    </item>
    <item>
      <title>EUVD-2026-210579</title>
      <link>https://cve.radiocsirt.org/vuln/euvd-2026-210579</link>
      <description>EUVD-2026-210579</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/euvd-2026-210579</guid>
    </item>
    <item>
      <title>fkie_cve-2024-55891</title>
      <link>https://cve.radiocsirt.org/vuln/fkie_cve-2024-55891</link>
      <description>&lt;p&gt;TYPO3 is a free and open source Content Management Framework. It has been discovered that the install tool password has been logged as plaintext in case the password hashing mechanism used for the password was incorrect. Users are advised to update to TYPO3 versions 13.4.3 ELTS which fixes the problem described. There are no known workarounds for this vulnerability.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;TYPO3 is a free and open source Content Management Framework. It has been discovered that the install tool password has been logged as plaintext in case the password hashing mechanism used for the password was incorrect. Users are advised to update to TYPO3 versions 13.4.3 ELTS which fixes the problem described. There are no known workarounds for this vulnerability.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/fkie_cve-2024-55891</guid>
    </item>
    <item>
      <title>GHSA-38x7-cc6w-j27q — TYPO3 Information Disclosure via Exception Handling/Logger</title>
      <link>https://cve.radiocsirt.org/vuln/ghsa-38x7-cc6w-j27q</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Packagist: typo3/cms-install&lt;/p&gt;
&lt;p&gt;### Problem
It has been discovered that the install tool password has been logged as plaintext in case the password hashing mechanism used for the password was incorrect.&lt;/p&gt;
&lt;p&gt;### Solution
Update to TYPO3 versions 13.4.3 LTS that fixes the problem described.&lt;/p&gt;
&lt;p&gt;### Credits
Thanks to TYPO3 core &amp;amp; security team member Oliver Hader who reported and fixed the issue.&lt;/p&gt;
&lt;p&gt;### References
* [TYPO3-CORE-SA-2025-001](https://typo3.org/security/advisory/typo3-core-sa-2025-001)&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Packagist: typo3/cms-install&lt;/p&gt;
&lt;p&gt;### Problem
It has been discovered that the install tool password has been logged as plaintext in case the password hashing mechanism used for the password was incorrect.&lt;/p&gt;
&lt;p&gt;### Solution
Update to TYPO3 versions 13.4.3 LTS that fixes the problem described.&lt;/p&gt;
&lt;p&gt;### Credits
Thanks to TYPO3 core &amp;amp; security team member Oliver Hader who reported and fixed the issue.&lt;/p&gt;
&lt;p&gt;### References
* [TYPO3-CORE-SA-2025-001](https://typo3.org/security/advisory/typo3-core-sa-2025-001)&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ghsa-38x7-cc6w-j27q</guid>
    </item>
    <item>
      <title>WID-SEC-W-2025-0055 — TYPO3 Core: Mehrere Schwachstellen</title>
      <link>https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0055</link>
      <description>&lt;p&gt;Ein entfernter, anonymer  oder authentisierter Angreifer kann mehrere Schwachstellen in TYPO3 Core ausnutzen, um Dateien zu manipulieren und vertrauliche Informationen preiszugeben.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Ein entfernter, anonymer  oder authentisierter Angreifer kann mehrere Schwachstellen in TYPO3 Core ausnutzen, um Dateien zu manipulieren und vertrauliche Informationen preiszugeben.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0055</guid>
    </item>
  </channel>
</rss>
