Vulnerabilities in typo3
198 resultsCVE-2026-77140HIGHBroken Access Control in extension "Telephone Directory" (telephonedirectory)EPSS 0.4%CVE-2026-77134HIGHBroken Access Control in extension "femanager" (femanager)EPSS 0.4%CVE-2026-46724MEDIUMPath Traversal in extension "Faceted Search" (ke_search)EPSS 0.4%CVE-2026-120328MEDIUMInformation Disclosure in extension "Mail" (mail)EPSS 0.4%CVE-2026-77137HIGHSQL Injection in extension "Forms Export" (frp_form_answers)EPSS 0.4%CVE-2026-77129HIGHServer-Side Template Injection in extension "Event management and registration" (sf_event_mgt)EPSS 0.4%CVE-2026-8727HIGHRemote Code Execution in extension "Site Crawler" (crawler)EPSS 0.4%CVE-2026-112240MEDIUMBroken Access Control in extension "TYPO3 Fluid-Form by coding.ms" (fluid_form)EPSS 0.4%CVE-2026-120333HIGHBroken Access Control in extension "Frontend User Registration" (sf_register)EPSS 0.4%CVE-2026-112237MEDIUMServer-Side Request Forgery in extension "Kitodo.Presentation" (dlf)EPSS 0.4%CVE-2026-112067MEDIUMCaptcha Bypass in extension "Accessible Form Captcha" (bw_captcha)EPSS 0.4%CVE-2026-109162MEDIUMTYPO3 CMS - Security Misconfiguration in Form FrameworkEPSS 0.4%CVE-2025-48205HIGHThe sr_feuser_register extension through 12.4.8 for TYPO3 allows Insecure Direct Object Reference.EPSS 0.4%CVE-2025-48201HIGHThe ns_backup extension through 13.0.0 for TYPO3 has a Predictable Resource Location.EPSS 0.4%CVE-2024-55921HIGHCross-Site Request Forgery in Extension Manager Module in TYPO3EPSS 0.4%CVE-2025-48207HIGHThe reint_downloadmanager extension through 5.0.0 for TYPO3 allows Insecure Direct Object Reference.EPSS 0.4%CVE-2026-112064HIGHSQL Injection in extension "sgalinski Cookie Consent" (sg_cookie_optin)EPSS 0.4%CVE-2024-25119MEDIUMInformation Disclosure of Encryption Key in TYPO3 Install ToolEPSS 0.4%CVE-2026-120330HIGHBroken Access Control in extension "Mail" (mail)EPSS 0.4%CVE-2026-46721MEDIUMBroken Access Control in extension "Frontend User Registration" (sf_register)EPSS 0.4%