TYPO3 TYPO3 CMS

• CVE-2026-109162 Medium 6.3 TYPO3 CMS - Security Misconfiguration in Form Framework 0.4%
• CVE-2026-77132 Medium 5.3 TYPO3 CMS - Information Disclosure via Backend Localization Wizard 0.4%
• CVE-2026-85400 High 7.5 TYPO3 CMS - Missing Authorization in lowlevel commands 0.5%
• CVE-2026-19418 High 7.3 TYPO3 CMS - Broken Access Control in Backend and Install Tool 0.2%
• CVE-2026-15305 Medium 6.3 TYPO3 CMS - Unrestricted File Upload in Form Framework 0.3%
• CVE-2026-49742 High 7.1 TYPO3 CMS - Broken Access Control in Media Module 0.3%
• CVE-2026-49741 High 8.7 TYPO3 CMS - Privilege Escalation & SQL Injection in Form Framework 0.2%
• CVE-2026-49740 Medium 6.3 TYPO3 CMS - Insecure Deserialization in Core API 0.2%
• CVE-2026-49738 Low 2.1 TYPO3 CMS - Broken Access Control in File Abstraction Layer 0.4%
• CVE-2026-47352 Medium 5.3 TYPO3 CMS - Broken Access Control in Backend API 0.2%
• CVE-2026-47351 Medium 5.3 TYPO3 CMS - Broken Access Control in Clipboard 0.2%
• CVE-2026-47350 Medium 5.3 TYPO3 CMS - Broken Access Control in DataHandler 0.2%
• CVE-2026-47349 Medium 5.3 TYPO3 CMS - Broken Access Control in Recycler 0.2%
• CVE-2026-47348 Medium 5.1 TYPO3 CMS - Cross-Site Scripting in Indexed Search 0.3%
• CVE-2026-47347 Medium 5.3 TYPO3 CMS - Open Redirect in Core Utilities 0.3%
• CVE-2026-47346 High 7.6 TYPO3 CMS - Broken Access Control in Form Framework 0.3%
• CVE-2026-47343 High 7.2 TYPO3 CMS - Destructive Actions on File Mount Folders 0.2%
• CVE-2026-11607 High 7.6 TYPO3 CMS - Broken Access Control in Form Framework 0.2%
• CVE-2026-6553 High 7.3 TYPO3 CMS Stores Cleartext Password in User Settings Module 0.2%
• CVE-2026-0859 Medium 5.2 TYPO3 CMS Allows Insecure Deserialization via Mailer File Spool 0.2%
• CVE-2025-59022 High 7.1 TYPO3 CMS Allows Broken Access Control in Recycler Module 0.4%
• CVE-2025-59021 Medium 5.3 TYPO3 CMS Allows Broken Access Control in Redirects Module 0.3%
• CVE-2025-59020 Medium 5.3 TYPO3 CMS Allows Broken Access Control in Edit Document Controller 0.3%
• CVE-2025-59019 Medium 5.3 Information Disclosure via CSV Download 0.2%
• CVE-2025-59018 High 7.1 Information Disclosure in Workspaces Module 0.3%
• CVE-2025-59017 Medium 5.3 Broken Access Control in Backend AJAX Routes 0.3%
• CVE-2025-59016 Medium 5.3 Information Disclosure via File Abstraction Layer 0.2%
• CVE-2025-59015 Medium 6.3 Insufficient Entropy in Password Generation 0.2%
• CVE-2025-59014 Medium 5.1 Denial of Service in TYPO3 Bookmark Toolbar 0.3%
• CVE-2025-59013 Medium 5.3 Open Redirect in TYPO3 CMS 0.2%
• CVE-2021-32768 Medium 6.1 Cross-Site Scripting via Rich-Text Content 0.7%
• CVE-2021-32767 Medium 5.3 Information Disclosure in User Authentication 0.8%
• CVE-2021-32669 Medium 6.4 Cross-Site Scripting in Backend Grid View 0.6%
• CVE-2021-32668 Medium 6.4 Cross-Site Scripting in Query Generator & Query View 0.6%
• CVE-2021-32667 Medium 6.4 Cross-Site Scripting in Page Preview 0.6%
• CVE-2021-21359 Medium 5.9 Denial of Service in Page Error Handling 1.7%
• CVE-2021-21370 Medium 5.4 Cross-Site Scripting in Content Preview (CType menu) 0.9%
• CVE-2021-21339 Medium 5.9 Cleartext storage of session identifier 0.9%
• CVE-2021-21340 Medium 5.4 Cross-Site Scripting in Content Preview 0.9%
• CVE-2021-21355 High 8.6 Unrestricted File Upload in Form Framework 1.6%
• CVE-2021-21357 High 8.3 Broken Access Control in Form Framework 1.6%
• CVE-2021-21358 Medium 5.4 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in typo3/cms-form 0.9%
• CVE-2021-21338 Medium 4.7 Open Redirection in Login Handling 1.1%
• CVE-2020-26229 Low 3.7 XML External Entity in Dashboard Widget 0.6%
• CVE-2020-26228 High 8.1 Cleartext storage of session identifier 0.7%
• CVE-2020-26227 Medium 6.1 Cross-Site Scripting in Fluid view helpers 0.7%
• CVE-2020-15098 High 8.8 Missing Required Cryptographic Step Leading to Sensitive Information Disclosure in TYPO3 CMS 2.2%
• CVE-2020-15099 High 8.1 Exposure of Sensitive Information to an Unauthorized Actor in TYPO3 CMS 1.8%
• CVE-2020-11069 High 8.0 Cross-Site Request Forgery in TYPO3 CMS 0.7%
• CVE-2020-11067 High 8.8 Deserialization of Untrusted Data in TYPO3 CMS 2.0%