Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 6 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,605All CVEsplus 19,141 rejected
- 674Last 24 hours2,972 in the last 7 days
- 17,113Last 30 days1,608 of them critical
- 1,769Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 3 | 33 | 44 | 3 | 0 | 83 | 95 |
| 2025 | 0 | 3 | 8 | 1 | 0 | 12 | 12 |
| Title | ||
|---|---|---|
| CVE-2026-120327 | Open Redirection in extension "Mail" (mail)TYPO3 · Extension "Mail" | Medium5.3 |
| CVE-2026-120328 | Information Disclosure in extension "Mail" (mail)TYPO3 · Extension "Mail" | Medium6.9 |
| CVE-2026-120329 | Broken Access Control in extension "Mail" (mail)TYPO3 · Extension "Mail" | Medium5.3 |
| CVE-2026-120330 | Broken Access Control in extension "Mail" (mail)TYPO3 · Extension "Mail" | High7.1 |
| CVE-2026-120331 | Server-Side Request Forgery in extension "Mail" (mail)TYPO3 · Extension "Mail" | Medium5.3 |
| CVE-2026-120332 | Cross-Site Scripting in extension "Mail" (mail)TYPO3 · Extension "Mail" | Medium5.1 |
| CVE-2026-120333 | Broken Access Control in extension "Frontend User Registration" (sf_register)TYPO3 · Extension "Frontend User Registration" | High8.8 |
| CVE-2026-112069 | Broken Access Control in extension "FAL Protect" (fal_protect)TYPO3 · Extension "FAL Protect" | Medium6.3 |
| CVE-2026-112065 | Missing Authorization in extension "sgalinski Cookie Consent" (sg_cookie_optin)TYPO3 · Extension "sgalinski Cookie Consent" | Medium5.3 |
| CVE-2026-112064 | SQL Injection in extension "sgalinski Cookie Consent" (sg_cookie_optin)TYPO3 · Extension "sgalinski Cookie Consent" | High7.1 |
| CVE-2026-112066 | Missing Authorization in extension "sgalinski Cookie Consent" (sg_cookie_optin)TYPO3 · Extension "sgalinski Cookie Consent" | High7.1 |
| CVE-2026-112067 | Captcha Bypass in extension "Accessible Form Captcha" (bw_captcha)TYPO3 · Extension "Accessible Form Captcha" | Medium6.9 |
| CVE-2026-112068 | Insecure Direct Object Reference in extension "Analytics" (analytics)TYPO3 · Extension "Analytics" | Medium5.3 |
| CVE-2026-112237 | Server-Side Request Forgery in extension "Kitodo.Presentation" (dlf)TYPO3 · Extension "Kitodo.Presentation" | Medium6.9 |
| CVE-2026-112240 | Broken Access Control in extension "TYPO3 Fluid-Form by coding.ms" (fluid_form)TYPO3 · Extension "TYPO3 Fluid-Form by coding.ms" | Medium6.3 |
| CVE-2026-113442 | Cross-Site Scripting in extension "TYPO3 Fluid-Form by coding.ms" (fluid_form)TYPO3 · Extension "TYPO3 Fluid-Form by coding.ms" | Medium5.3 |
| CVE-2026-112238 | SQL Injection in extension "File manager" (ameos_filemanager)TYPO3 · Extension "File manager" | High8.7 |
| CVE-2026-112071 | Broken Access Control in extension "TYPO3 Shop by coding.ms" (shop)TYPO3 · Extension "TYPO3 Shop by coding.ms" | Medium6.9 |
| CVE-2026-113468 | Broken Access Control in extension "TYPO3 Shop by coding.ms" (shop)TYPO3 · Extension "TYPO3 Shop by coding.ms" | Medium6.9 |
| CVE-2026-112239 | Broken Access Control in extension "TYPO3 AI Integration Extension" (ns_t3ai)TYPO3 · Extension "TYPO3 AI Integration Extension" | High7.2 |
| CVE-2026-113459 | Sensitive Data Exposure in extension "TYPO3 AI Integration Extension" (ns_t3ai)TYPO3 · Extension "TYPO3 AI Integration Extension" | High7.1 |
| CVE-2026-112070 | Broken Access Control in extension "Analytics" (analytics)TYPO3 · Extension "Analytics" | Medium5.3 |
| CVE-2026-109162 | TYPO3 CMS - Security Misconfiguration in Form FrameworkTYPO3 · TYPO3 CMS | Medium6.3 |
| CVE-2026-77132 | TYPO3 CMS - Information Disclosure via Backend Localization WizardTYPO3 · TYPO3 CMS | Medium5.3 |
| CVE-2026-85400 | TYPO3 CMS - Missing Authorization in lowlevel commandsTYPO3 · TYPO3 CMS | High7.5 |
| CVE-2026-56092 | Broken Access Control in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)TYPO3 · Extension "Apache Solr for TYPO3 - Enterprise Search" | High7.6 |
| CVE-2026-56093 | Broken Access Control in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)TYPO3 · Extension "Apache Solr for TYPO3 - Enterprise Search" | Medium6.3 |
| CVE-2026-56094 | Information Disclosure in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)TYPO3 · Extension "Apache Solr for TYPO3 - Enterprise Search" | Medium6.3 |
| CVE-2026-56095 | Insecure Deserialization in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)TYPO3 · Extension "Apache Solr for TYPO3 - Enterprise Search" | High7.7 |
| CVE-2026-56096 | Information Disclosure in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)TYPO3 · Extension "Apache Solr for TYPO3 - Enterprise Search" | Medium6.3 |
| CVE-2026-77127 | Information Disclosure in extension "Modules" (modules)TYPO3 · Extension "Modules" | Medium6.0 |
| CVE-2026-77128 | Broken Access Control in extension "Event management and registration" (sf_event_mgt)TYPO3 · Extension "Event management and registration" | Medium6.3 |
| CVE-2026-77129 | Server-Side Template Injection in extension "Event management and registration" (sf_event_mgt)TYPO3 · Extension "Event management and registration" | High7.7 |
| CVE-2026-77130 | Insufficient Session Expiration in extension "SYSSY - TYPO3 Monitoring & Security Checks" (syssy)TYPO3 · Extension "SYSSY - TYPO3 Monitoring & Security Checks" | Medium5.3 |
| CVE-2026-77131 | Cleartext Transmission of Sensitive Information in extension "SYSSY - TYPO3 Monitoring & Security Checks" (syssy)TYPO3 · Extension "SYSSY - TYPO3 Monitoring & Security Checks" | Medium5.3 |
| CVE-2026-77133 | Broken Access Control in extension "femanager" (femanager)TYPO3 · Extension "femanager" | Medium6.0 |
| CVE-2026-77134 | Broken Access Control in extension "femanager" (femanager)TYPO3 · Extension "femanager" | High8.3 |
| CVE-2026-77135 | Information Disclosure in extension "femanager" (femanager)TYPO3 · Extension "femanager" | High8.2 |
| CVE-2026-77136 | Server-Side Template Injection in extension "powermail" (powermail)TYPO3 · Extension "powermail" | Critical9.5 |
| CVE-2026-77137 | SQL Injection in extension "Forms Export" (frp_form_answers)TYPO3 · Extension "Forms Export" | High7.7 |
| CVE-2026-77138 | Remote Code Execution in extension "HTML5 Video Player vs. Powermail" (html5videoplayer_powermail)TYPO3 · Extension "HTML5 Video Player vs. Powermail" | Critical9.3 |
| CVE-2026-77139 | Path Traversal in extension "Mask" (mask)TYPO3 · Extension "Mask" | Medium6.0 |
| CVE-2026-77140 | Broken Access Control in extension "Telephone Directory" (telephonedirectory)TYPO3 · Extension "Telephone Directory" | High8.7 |
| CVE-2026-77141 | Broken Access Control in extension "Club Directory" (clubdirectory)TYPO3 · Extension "Club Directory" | High8.8 |
| CVE-2026-77142 | Broken Access Control in extension "Industry Directory" (yellowpages2)TYPO3 · Extension "Industry Directory" | High8.8 |
| CVE-2026-77143 | Broken Access Control in extension "Forum" (pforum)TYPO3 · Extension "Forum" | High8.8 |
| CVE-2026-77144 | Broken Access Control in extension "Events 2" (events2)TYPO3 · Extension "Events 2" | High7.1 |
| CVE-2026-77145 | Broken Access Control in extension "Events 2" (events2)TYPO3 · Extension "Events 2" | High7.1 |
| CVE-2026-77146 | Broken Access Control in extension "femanager" (femanager)TYPO3 · Extension "femanager" | High8.3 |
| CVE-2026-19418 | TYPO3 CMS - Broken Access Control in Backend and Install ToolTYPO3 · TYPO3 CMS | High7.3 |