TYPO3 TYPO3 CMS vulnerabilities

CVEs per yearBy the year they were published

1. 20208
2. 20257
3. 202623

Newest CVEs

• CVE-2026-109162

  TYPO3 CMS - Security Misconfiguration in Form Framework

  TYPO3 · TYPO3 CMS

  Medium6.3
• CVE-2026-77132

  TYPO3 CMS - Information Disclosure via Backend Localization Wizard

  TYPO3 · TYPO3 CMS

  Medium5.3
• CVE-2026-85400

  TYPO3 CMS - Missing Authorization in lowlevel commands

  TYPO3 · TYPO3 CMS

  High7.5
• CVE-2026-19418

  TYPO3 CMS - Broken Access Control in Backend and Install Tool

  TYPO3 · TYPO3 CMS

  High7.3
• CVE-2026-15305

  TYPO3 CMS - Unrestricted File Upload in Form Framework

  TYPO3 · TYPO3 CMS

  Medium6.3
• CVE-2026-49742

  TYPO3 CMS - Broken Access Control in Media Module

  TYPO3 · TYPO3 CMS

  High7.1
• CVE-2026-49741

  TYPO3 CMS - Privilege Escalation & SQL Injection in Form Framework

  TYPO3 · TYPO3 CMS

  High8.7
• CVE-2026-49740

  TYPO3 CMS - Insecure Deserialization in Core API

  TYPO3 · TYPO3 CMS

  Medium6.3
• CVE-2026-49738

  TYPO3 CMS - Broken Access Control in File Abstraction Layer

  TYPO3 · TYPO3 CMS

  Low2.1
• CVE-2026-47352

  TYPO3 CMS - Broken Access Control in Backend API

  TYPO3 · TYPO3 CMS

  Medium5.3