https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-04T19:50:59.378643+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/certfr-2026-avi-1131 certfr-2026-avi-1131 — De multiples vulnérabilités ont été découvertes dans Typo3. Elles permettent à un attaquant de provoquer une atteinte à… 2026-10-04T19:50:59.400537+00:00 certfr-2026-avi-1131 https://vulnerability.circl.lu/vuln/fkie_cve-2026-77132 fkie_cve-2026-77132 2026-10-04T19:50:59.400651+00:00

It has been discovered that several AJAX routes used for the backend localization wizard failed to perform authorization checks. This allowed authenticated, low-privileged backend users to access information about records and content elements that fall outside of their permitted range. Exploiting this vulnerability requires a low-privileged backend user account. This issue affects TYPO3 CMS versions 10.0.0-10.4.59, 11.0.0-11.5.53, 12.0.0-12.4.48, 13.0.0-13.4.34 and 14.0.0-14.3.6.

 https://vulnerability.circl.lu/vuln/wid-sec-w-2026-3224 WID-SEC-W-2026-3224 — TYPO3 Core: Mehrere Schwachstellen 2026-10-04T19:50:59.400723+00:00

Ein Angreifer kann mehrere Schwachstellen in TYPO3 Core ausnutzen, um Informationen offenzulegen, einen Denial of Service zu verursachen oder seine Rechte zu erweitern.