{"schema_version":1,"title":"Typo3 vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 35 vulnerabilities in Typo3: 0 in the last 7 days and 13 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2023-50462, was published on 14 September 2026. 1 technology has a page of its own.","url":"https://junglewise.ai/threats/vendors/typo3","json_url":"https://junglewise.ai/threats/vendors/typo3.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/typo3","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","counts":{"high":11,"all_time":35,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":2,"last_90_days":13,"last_365_days":31},"latest":[{"cve":"CVE-2023-50462","cvss":5.3,"epss":0.0027,"slug":"cve-2023-50462-typo3-content-consent-extension-insecure-direct-object-reference","title":"TYPO3 Content Consent extension insecure direct object reference","severity":"medium","exploited":false,"published_at":"2026-09-14T07:17:15.793+00:00","url":"https://junglewise.ai/threats/cve-2023-50462-typo3-content-consent-extension-insecure-direct-object-reference"},{"cve":"CVE-2023-50461","cvss":8.8,"epss":0.0033,"slug":"cve-2023-50461-typo3-direct-mail-configuration-injection-in-backend-module","title":"TYPO3 Direct Mail configuration injection in backend module","severity":"high","exploited":false,"published_at":"2026-09-14T07:17:15.653+00:00","url":"https://junglewise.ai/threats/cve-2023-50461-typo3-direct-mail-configuration-injection-in-backend-module"},{"cve":"CVE-2026-77139","cvss":6.5,"epss":0.0044,"slug":"cve-2026-77139-typo3-mask-extension-path-traversal-in-template-handling","title":"TYPO3 Mask extension path traversal in template handling","severity":"info","exploited":false,"published_at":"2026-08-25T09:17:34.647+00:00","url":"https://junglewise.ai/threats/cve-2026-77139-typo3-mask-extension-path-traversal-in-template-handling"},{"cve":"CVE-2026-77138","cvss":9.8,"epss":0.0072,"slug":"cve-2026-77138-typo3-html5-video-player-vs-powermail-extension-remote-code","title":"TYPO3 HTML5 Video Player vs. Powermail extension remote code execution","severity":"info","exploited":false,"published_at":"2026-08-25T09:17:34.497+00:00","url":"https://junglewise.ai/threats/cve-2026-77138-typo3-html5-video-player-vs-powermail-extension-remote-code"},{"cve":"CVE-2026-77137","cvss":7.3,"epss":0.004,"slug":"cve-2026-77137-typo3-forms-export-sql-injection-in-backend-module","title":"TYPO3 Forms Export SQL injection in backend module","severity":"info","exploited":false,"published_at":"2026-08-25T09:17:34.343+00:00","url":"https://junglewise.ai/threats/cve-2026-77137-typo3-forms-export-sql-injection-in-backend-module"},{"cve":"CVE-2026-77130","cvss":5.7,"epss":0.0035,"slug":"cve-2026-77130-typo3-syssy-insufficient-jwt-token-expiration-validation","title":"TYPO3 SYSSY insufficient JWT token expiration validation","severity":"info","exploited":false,"published_at":"2026-08-25T09:17:33.36+00:00","url":"https://junglewise.ai/threats/cve-2026-77130-typo3-syssy-insufficient-jwt-token-expiration-validation"},{"cve":"CVE-2026-77129","cvss":7.1,"epss":0.004,"slug":"cve-2026-77129-typo3-sf-event-mgt-server-side-template-injection-in-email","title":"TYPO3 sf_event_mgt Server-Side Template Injection in email subject","severity":"info","exploited":false,"published_at":"2026-08-25T09:17:33.2+00:00","url":"https://junglewise.ai/threats/cve-2026-77129-typo3-sf-event-mgt-server-side-template-injection-in-email"},{"cve":"CVE-2026-77128","cvss":7.5,"epss":0.0051,"slug":"cve-2026-77128-typo3-sf-event-mgt-broken-access-control-on-event-visibility","title":"TYPO3 sf_event_mgt broken access control on event visibility","severity":"info","exploited":false,"published_at":"2026-08-25T09:17:33.033+00:00","url":"https://junglewise.ai/threats/cve-2026-77128-typo3-sf-event-mgt-broken-access-control-on-event-visibility"},{"cve":"CVE-2026-77127","cvss":6.5,"epss":0.0035,"slug":"cve-2026-77127-typo3-modules-extension-information-disclosure-in-backend-ajax","title":"TYPO3 Modules extension information disclosure in backend AJAX endpoint","severity":"info","exploited":false,"published_at":"2026-08-25T09:17:32.86+00:00","url":"https://junglewise.ai/threats/cve-2026-77127-typo3-modules-extension-information-disclosure-in-backend-ajax"},{"cve":"CVE-2026-56096","cvss":7.5,"epss":0.0043,"slug":"cve-2026-56096-typo3-apache-solr-for-typo3-information-disclosure-in-search","title":"TYPO3 Apache Solr for TYPO3 information disclosure in search query","severity":"info","exploited":false,"published_at":"2026-08-25T09:17:31.647+00:00","url":"https://junglewise.ai/threats/cve-2026-56096-typo3-apache-solr-for-typo3-information-disclosure-in-search"},{"cvss":7.3,"slug":"typo3-cms-broken-access-control-in-backend-and-install-tool-aa5ab01f","title":"TYPO3 CMS broken access control in backend and install tool","severity":"high","exploited":false,"published_at":"2026-08-11T09:32:33+00:00","url":"https://junglewise.ai/threats/typo3-cms-broken-access-control-in-backend-and-install-tool-aa5ab01f"},{"cve":"CVE-2026-19418","cvss":4,"epss":0.0024,"slug":"cve-2026-19418-typo3-cms-broken-access-control-in-backend-and-install-tool","title":"The referrer enforcement introduced with TYPO3-CORE-SA-2020-006 became ineffective in TYPO3 v13.0, where TYPO3 CMS started","severity":"high","exploited":false,"published_at":"2026-08-11T08:17:20.533+00:00","url":"https://junglewise.ai/threats/cve-2026-19418-typo3-cms-broken-access-control-in-backend-and-install-tool"},{"cve":"CVE-2026-15305","cvss":4,"epss":0.0025,"slug":"cve-2026-15305-typo3-cms-unrestricted-file-upload-in-form-framework","title":"TYPO3 CMS unrestricted file upload in Form Framework","severity":"medium","exploited":false,"published_at":"2026-07-14T13:18:16.27+00:00","url":"https://junglewise.ai/threats/cve-2026-15305-typo3-cms-unrestricted-file-upload-in-form-framework"},{"cve":"CVE-2026-49742","cvss":4,"epss":0.0046,"slug":"cve-2026-49742-typo3-cms-broken-access-control-in-media-module","title":"TYPO3 CMS broken access control in Media Module","severity":"high","exploited":false,"published_at":"2026-06-09T11:16:53.65+00:00","url":"https://junglewise.ai/threats/cve-2026-49742-typo3-cms-broken-access-control-in-media-module"},{"cve":"CVE-2026-49741","cvss":4,"epss":0.0037,"slug":"cve-2026-49741-typo3-cms-broken-access-control-in-form-framework-form-definition","title":"TYPO3 CMS broken access control in Form Framework form_definition table","severity":"high","exploited":false,"published_at":"2026-06-09T11:16:53.52+00:00","url":"https://junglewise.ai/threats/cve-2026-49741-typo3-cms-broken-access-control-in-form-framework-form-definition"},{"cve":"CVE-2026-49740","cvss":4,"epss":0.0059,"slug":"cve-2026-49740-typo3-cms-insecure-deserialization-in-variablefrontend-and","title":"TYPO3 CMS insecure deserialization in VariableFrontend and Registry","severity":"medium","exploited":false,"published_at":"2026-06-09T11:16:53.38+00:00","url":"https://junglewise.ai/threats/cve-2026-49740-typo3-cms-insecure-deserialization-in-variablefrontend-and"},{"cve":"CVE-2026-49738","cvss":4,"epss":0.0052,"slug":"cve-2026-49738-typo3-cms-path-traversal-in-generalutility-isallowedabspath","title":"TYPO3 CMS path traversal in GeneralUtility::isAllowedAbsPath","severity":"medium","exploited":false,"published_at":"2026-06-09T11:16:53.247+00:00","url":"https://junglewise.ai/threats/cve-2026-49738-typo3-cms-path-traversal-in-generalutility-isallowedabspath"},{"cve":"CVE-2026-47352","cvss":4,"epss":0.0041,"slug":"cve-2026-47352-typo3-cms-broken-access-control-in-backend-api","title":"TYPO3 CMS broken access control in Backend API","severity":"medium","exploited":false,"published_at":"2026-06-09T11:16:53.12+00:00","url":"https://junglewise.ai/threats/cve-2026-47352-typo3-cms-broken-access-control-in-backend-api"},{"cve":"CVE-2026-47350","cvss":4,"epss":0.0041,"slug":"cve-2026-47350-typo3-cms-broken-access-control-in-datahandler","title":"TYPO3 CMS broken access control in DataHandler","severity":"medium","exploited":false,"published_at":"2026-06-09T11:16:52.86+00:00","url":"https://junglewise.ai/threats/cve-2026-47350-typo3-cms-broken-access-control-in-datahandler"},{"cve":"CVE-2026-47349","cvss":4,"epss":0.0041,"slug":"cve-2026-47349-typo3-cms-missing-authorization-in-recycler-module","title":"TYPO3 CMS missing authorization in Recycler module","severity":"medium","exploited":false,"published_at":"2026-06-09T11:16:52.72+00:00","url":"https://junglewise.ai/threats/cve-2026-47349-typo3-cms-missing-authorization-in-recycler-module"},{"cve":"CVE-2026-47348","cvss":4,"epss":0.0047,"slug":"cve-2026-47348-typo3-cms-xss-in-indexed-search-component","title":"TYPO3 CMS XSS in Indexed Search component","severity":"medium","exploited":false,"published_at":"2026-06-09T11:16:52.583+00:00","url":"https://junglewise.ai/threats/cve-2026-47348-typo3-cms-xss-in-indexed-search-component"},{"cve":"CVE-2026-47347","cvss":4,"epss":0.0048,"slug":"cve-2026-47347-typo3-cms-open-redirect-in-generalutility-sanitizelocalurl","title":"TYPO3 CMS open redirect in GeneralUtility::sanitizeLocalUrl","severity":"medium","exploited":false,"published_at":"2026-06-09T11:16:52.457+00:00","url":"https://junglewise.ai/threats/cve-2026-47347-typo3-cms-open-redirect-in-generalutility-sanitizelocalurl"},{"cve":"CVE-2026-47346","cvss":4,"epss":0.0044,"slug":"cve-2026-47346-typo3-cms-privilege-escalation-in-form-framework-via-mixed-case","title":"TYPO3 CMS privilege escalation in Form Framework via mixed-case extensions","severity":"high","exploited":false,"published_at":"2026-06-09T11:16:52.32+00:00","url":"https://junglewise.ai/threats/cve-2026-47346-typo3-cms-privilege-escalation-in-form-framework-via-mixed-case"},{"cve":"CVE-2026-47343","cvss":4,"epss":0.0041,"slug":"cve-2026-47343-typo3-cms-broken-access-control-in-file-abstraction-layer","title":"TYPO3 CMS broken access control in File Abstraction Layer","severity":"high","exploited":false,"published_at":"2026-06-09T11:16:52.193+00:00","url":"https://junglewise.ai/threats/cve-2026-47343-typo3-cms-broken-access-control-in-file-abstraction-layer"},{"cve":"CVE-2026-11607","cvss":4,"epss":0.0024,"slug":"cve-2026-11607-typo3-cms-privilege-escalation-in-form-framework","title":"TYPO3 CMS privilege escalation in Form Framework","severity":"high","exploited":false,"published_at":"2026-06-09T11:16:47.027+00:00","url":"https://junglewise.ai/threats/cve-2026-11607-typo3-cms-privilege-escalation-in-form-framework"}],"vendor":{"hub":true,"name":"Typo3","slug":"typo3","description":"PHP content management system and framework for building web applications.","url":"https://junglewise.ai/threats/vendors/typo3"},"weekly":[{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":8},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2023-50461","cvss":8.8,"epss":0.0033,"slug":"cve-2023-50461-typo3-direct-mail-configuration-injection-in-backend-module","title":"TYPO3 Direct Mail configuration injection in backend module","severity":"high","exploited":false,"published_at":"2026-09-14T07:17:15.653+00:00","url":"https://junglewise.ai/threats/cve-2023-50461-typo3-direct-mail-configuration-injection-in-backend-module"},{"cvss":7.3,"slug":"typo3-cms-broken-access-control-in-backend-and-install-tool-aa5ab01f","title":"TYPO3 CMS broken access control in backend and install tool","severity":"high","exploited":false,"published_at":"2026-08-11T09:32:33+00:00","url":"https://junglewise.ai/threats/typo3-cms-broken-access-control-in-backend-and-install-tool-aa5ab01f"},{"cve":"CVE-2026-8727","cvss":4,"epss":0.005,"slug":"cve-2026-8727-typo3-site-crawler-insecure-deserialization-in-x-t3crawler-meta","title":"TYPO3 Site Crawler insecure deserialization in X-T3Crawler-Meta header","severity":"high","exploited":false,"published_at":"2026-05-19T10:16:25.747+00:00","url":"https://junglewise.ai/threats/cve-2026-8727-typo3-site-crawler-insecure-deserialization-in-x-t3crawler-meta"},{"cve":"CVE-2026-8726","cvss":4,"epss":0.005,"slug":"cve-2026-8726-typo3-news-system-sql-injection-in-date-menu-plugin","title":"TYPO3 News system SQL injection in Date Menu plugin","severity":"high","exploited":false,"published_at":"2026-05-19T10:16:25.603+00:00","url":"https://junglewise.ai/threats/cve-2026-8726-typo3-news-system-sql-injection-in-date-menu-plugin"},{"cve":"CVE-2026-49742","cvss":4,"epss":0.0046,"slug":"cve-2026-49742-typo3-cms-broken-access-control-in-media-module","title":"TYPO3 CMS broken access control in Media Module","severity":"high","exploited":false,"published_at":"2026-06-09T11:16:53.65+00:00","url":"https://junglewise.ai/threats/cve-2026-49742-typo3-cms-broken-access-control-in-media-module"},{"cve":"CVE-2026-47346","cvss":4,"epss":0.0044,"slug":"cve-2026-47346-typo3-cms-privilege-escalation-in-form-framework-via-mixed-case","title":"TYPO3 CMS privilege escalation in Form Framework via mixed-case extensions","severity":"high","exploited":false,"published_at":"2026-06-09T11:16:52.32+00:00","url":"https://junglewise.ai/threats/cve-2026-47346-typo3-cms-privilege-escalation-in-form-framework-via-mixed-case"},{"cve":"CVE-2026-47343","cvss":4,"epss":0.0041,"slug":"cve-2026-47343-typo3-cms-broken-access-control-in-file-abstraction-layer","title":"TYPO3 CMS broken access control in File Abstraction Layer","severity":"high","exploited":false,"published_at":"2026-06-09T11:16:52.193+00:00","url":"https://junglewise.ai/threats/cve-2026-47343-typo3-cms-broken-access-control-in-file-abstraction-layer"},{"cve":"CVE-2026-8827","cvss":4,"epss":0.0039,"slug":"cve-2026-8827-typo3-tt-address-sql-injection-in-addressrepository","title":"TYPO3 tt_address SQL injection in AddressRepository","severity":"high","exploited":false,"published_at":"2026-05-19T10:16:25.887+00:00","url":"https://junglewise.ai/threats/cve-2026-8827-typo3-tt-address-sql-injection-in-addressrepository"},{"cve":"CVE-2026-49741","cvss":4,"epss":0.0037,"slug":"cve-2026-49741-typo3-cms-broken-access-control-in-form-framework-form-definition","title":"TYPO3 CMS broken access control in Form Framework form_definition table","severity":"high","exploited":false,"published_at":"2026-06-09T11:16:53.52+00:00","url":"https://junglewise.ai/threats/cve-2026-49741-typo3-cms-broken-access-control-in-form-framework-form-definition"},{"cve":"CVE-2026-19418","cvss":4,"epss":0.0024,"slug":"cve-2026-19418-typo3-cms-broken-access-control-in-backend-and-install-tool","title":"The referrer enforcement introduced with TYPO3-CORE-SA-2020-006 became ineffective in TYPO3 v13.0, where TYPO3 CMS started","severity":"high","exploited":false,"published_at":"2026-08-11T08:17:20.533+00:00","url":"https://junglewise.ai/threats/cve-2026-19418-typo3-cms-broken-access-control-in-backend-and-install-tool"}],"generated_at":"2026-09-28T03:07:00.154823+00:00","technologies":[{"name":"TYPO3 CMS Core","slug":"cms-core","vulnerabilities":15,"url":"https://junglewise.ai/threats/technologies/cms-core"}]}