Known vulnerabilities in TYPO3
Vendor:
TYPO3
Software:
TYPO3
Software CPE:
cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*
Website:
https://typo3.org/
Total vulnerabilities:
250
Public exploits:
3
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.4
Breakdown by Severity Chart
12.4.49
12.4.48
12.4.47
11.5.54
11.5.53
11.5.52
10.4.60
10.4.59
10.4.58
13.4.35
14.3.7
14.3.6
13.4.34
14.3.5
13.4.33
12.4.46
11.5.51
11.5.50
10.4.57
10.4.56
14.3.4
13.4.32
14.3.3
13.4.31
14.3.2
13.4.30
14.3.1
13.4.29
14.3.0
13.4.28
12.4.45
14.2.0
13.4.27
12.4.44
14.1.1
13.4.26
12.4.43
13.4.25
14.1.0
13.4.24
12.4.42
11.5.49
10.4.55
14.0.2
13.4.23
12.4.41
13.4.22
14.0.1
13.4.21
12.4.40
14.0.0
13.4.20
12.4.39
13.4.19
12.4.38
10.4.54
10.4.53
10.4.52
10.4.51
9.5.55
9.5.54
9.5.53
9.5.52
11.5.48
11.5.47
11.5.46
11.5.45
13.4.18
12.4.37
13.4.17
12.4.36
13.4.16
12.4.35
13.4.15
12.4.34
13.4.14
12.4.33
13.4.13
12.4.32
9.5.51
9.5.50
11.5.44
11.5.43
10.4.50
10.4.49
13.4.12
12.4.31
13.4.11
12.4.30
13.4.10
12.4.29
13.4.9
13.4.8
12.4.28
13.4.7
13.4.6
13.4.5
12.4.27
13.4.4
12.4.26
9.5.49
10.4.48
10.4.47
11.5.42
13.4.3
12.4.25
13.4.2
12.4.24
13.4.1
12.4.23
12.4.22
11.5.41
13.4.0
10.4.46
13.3.1
12.4.21
11.5.40
13.3.0
12.4.20
12.4.19
12.4.18
11.5.39
12.4.17
13.2.1
13.2.0
12.4.16
11.5.38
10.4.45
10.4.44
9.5.48
9.5.47
13.1.1
12.4.15
11.5.37
13.1.0
12.4.14
12.4.13
12.4.12
11.5.36
10.4.43
10.4.42
9.5.46
9.5.45
8.7.57
8.7.56
13.0.1
12.4.11
11.5.35
13.0.0
12.4.10
11.5.34
12.4.9
9.5.44
9.5.43
10.4.41
10.4.40
8.7.55
8.7.54
8.7.53
8.7.52
12.4.8
11.5.33
12.4.7
11.5.32
12.4.6
11.5.31
12.4.5
10.4.39
10.4.38
9.5.42
9.5.41
12.4.4
11.5.30
12.4.3
11.5.29
12.4.2
11.5.28
12.4.1
11.5.27
12.4.0
11.5.26
10.4.37
12.3.0
11.5.25
11.5.24
10.4.35
8.7.50
9.5.39
12.2.0
11.5.23
10.4.36
9.5.40
8.7.51
11.5.22
12.1.3
11.5.21
10.4.34
8.7.49
9.5.38
12.1.2
12.1.1
11.5.20
10.4.33
12.1.0
11.5.19
11.5.18
11.5.17
12.0.0
8.7.48
7.6.58
9.5.37
9.5.36
11.5.16
10.4.32
11.5.15
11.5.14
11.5.13
10.4.31
11.5.12
10.4.30
7.6.57
7.6.56
7.6.55
7.6.54
8.7.47
8.7.46
8.7.45
8.7.44
8.7.43
9.5.35
9.5.34
9.5.33
9.5.32
11.5.11
10.4.29
11.5.10
10.4.28
11.5.9
10.4.27
11.5.8
10.4.26
11.5.7
10.4.25
11.5.6
10.4.24
11.5.5
10.4.23
11.5.4
10.4.22
11.5.3
11.5.2
11.5.1
11.5.0
9.5.31
10.4.21
11.4.0
9.5.30
10.4.20
11.3.3
8.7.42
7.6.53
9.5.29
10.4.19
11.3.2
8.7.41
7.6.52
9.5.28
10.4.18
11.3.1
11.3.0
10.4.17
9.5.27
10.4.16
11.2.0
10.4.15
9.5.26
6.2.56
6.2.57
8.7.39
7.6.50
11.1.1
10.4.14
9.5.25
8.7.40
7.6.51
11.1.0
10.4.13
10.4.12
11.0.0
9.5.24
10.4.11
6.2.54
6.2.53
6.2.50
6.2.49
6.2.48
6.2.47
6.2.46
6.2.45
6.2.44
6.2.43
6.2.42
6.2.41
6.2.40
7.6.48
7.6.47
7.6.46
7.6.45
7.6.44
7.6.43
7.6.42
7.6.41
7.6.40
7.6.39
7.6.38
7.6.37
7.6.36
7.6.35
7.6.34
7.6.33
8.7.38
8.7.37
8.7.36
8.7.35
8.7.34
8.7.33
9.5.23
10.4.10
9.5.21
10.4.7
10.4.8
9.5.22
10.4.9
6.2.52
6.2.51
9.5.20
10.4.6
10.4.5
9.5.19
10.4.4
9.5.18
10.4.3
9.5.17
10.4.2
9.5.16
10.4.1
10.4.0
9.5.15
8.7.32
10.3.0
9.5.14
8.7.31
6.2.38 ELTS
9.5.13
10.2.2
8.7.30
9.5.12
10.2.1
10.2.0
8.7.29
9.5.11
8.7.28
9.5.10
10.1.0
9.5.9
10.0.0
8.7.26
8.7.27
9.5.7
9.5.8
9.5.6
9.5.5
8.7.25
8.7.24
6.0.0
4.1.1
4.1.0
4.0.0
3.6.1
9.5.4
9.5.3
9.5.0
9.4.0
9.3.2
8.7.23
8.7.22
8.7.19
8.7.18
6.2.39
6.2.38
6.2.37
6.2.36
6.2.35
6.2.34
6.2.33
6.2.32
6.2.31
6.2.30
6.2.29
6.2.28
6.2.27
7.6.31
9.5.1
8.7.20
9.5.2
8.7.21
7.6.32
9.3.3
9.3.1
9.3.0
9.2.1
8.7.17
8.7.16
8.7.15
8.7.14
8.7.1
8.7.0
7.6.30
7.6.29
7.6.28
7.6.27
8.7.13
9.2.0
9.1.0
9.0.0
8.7.12
8.7.11
8.7.10
8.7.9
8.7.8
8.7.7
8.7.6
7.6.26
7.6.25
7.6.24
7.6.23
8.7.5
7.6.22
8.7.4
8.7.3
8.7.2
7.6.21
7.6.20
7.6.19
7.6.18
7.6.17
8.6.1
8.6.0
8.5.1
8.5.0
8.4.1
8.4.0
8.3.1
8.3.0
7.6.16
7.6.15
7.6.14
7.6.13
7.6.12
7.6.11
1.1.2
0.4.1
0.4.0
7.0.1
6.2
6.1
6.0
4.2.7
4.1.11
3.5
4.3alpha1
4.2.4
4.2.5
4.2.3
4.2.6
4.0.9
4.1.10
4.3
4.5
4.10
4.11
4.8
4.4
4.7
4.6
4.9
1.1.10
4.1.9
4.1.7
4.1.8
1.3.2
4.0.11
4.0.12
1.1.1
1.0.14
1.3.0
4.0.10
4.2.1
4.2.0
4.2.2
4.2
4.1.5
4.1.6
4.1.4
4.0.8
1.2.0
0.1.2
1.1.09
4.0.6
4.0.7
4.1.3
4.0.5
4.1.2
3.0
4.1
4.0.4
3.8
4.0.3
4.0.2
4.0.1
4.0
1.1
3.8.0
3.7.0
4.6.6
4.2.9
6.2.0beta2
4.7.3
4.7.7
4.5.14
4.6.0beta3
4.6.0alpha1
6.1.5
4.6.0alpha3
4.5.34
4.4.0
4.6.8
6.2.0alpha2
7.6.6
4.0.13
6.2.13
6.2.0beta7
6.2.0beta6
4.5.1
6.2.0rc1
4.7.0
4.7.0beta1
4.5.6
4.4.3
4.6.5
4.5.39
4.5.9
4.7.0beta2
6.1.6
6.2.15
4.6.10
7.6.3
7.1.0
4.6.0rc1
6.1.3
4.7.9
4.3.6
7.5.0
4.7.10
4.5.36
7.6.7
6.1.0beta2
4.6.2
4.7.0beta3
4.3.10
4.4.2
6.0.10
4.2.15
3.7.1
6.2.16
4.7.11
4.6.16
6.2.1
4.7.0alpha1
4.5.30
4.5.17
6.2.0beta5
6.1.10
4.5.21
4.5.12
6.1.1
6.0.5rc1
4.6.0
6.1.11
4.6.12
4.5.27
4.7.4
4.6.1
8.0.1
6.1.0
3.5.0
4.1.15
6.2.19
6.0.0alpha1
4.6.3
4.5.0
4.2.16
6.2.11
7.6.8
7.6.1
4.5.35
4.3.8
8.1.0
6.2.9
4.7.0rc1
4.5.38
4.4.6
4.5.40
4.4.11
7.4.0
6.0.0rc2
4.7.13
4.5.31
7.6.2
4.5.33
6.1.0beta1
6.1.7
4.2.13
6.1.12
4.5.22
4.7.19
4.5.2
4.5.13
6.2.0beta3
4.1.12
4.7.0alpha2
7.0.0
3.8.1
6.0.14
4.6.4
4.7.0alpha3
6.0.2
7.3.0
6.2.5
7.2.0
4.6.0beta1
4.7.0rc2
4.5.24
6.2.10
4.6.15
4.3.7
4.2.14
6.2.0alpha1
6.2.3
4.3.5
4.3.13
4.4.13
4.2.11
4.5.37
4.2.10
6.2.0rc2
3.3.0
4.5.16
6.0.0alpha3
4.5.25
4.7.1
4.3.4
4.1.14
4.3.3
6.2.22
8.1.2
6.2.0beta4
6.1.8
4.5.26
4.4.5
4.7.18
4.3.2
4.4.15
4.5.10
6.0.9
8.1.1
4.2.8
4.5.3
4.6.0alpha2
4.7.6
6.1.2
6.2.18
4.5.15
4.1.13
7.6-snapshot-20160223
6.2.6
6.1.0alpha1
7.6.5
4.4.8
4.6.0beta2
4.4.12
6.0.5
4.7.15
6.2.0beta1
4.3.9
6.2.24
4.5.32
6.2.12
4.7.5
6.0.4
6.0.3
6.0.11
4.7.11rc1
6.2.0alpha3
6.0.12
6.0.0alpha2
4.4.7
4.3.14
4.7.8
4.5.26rc1
4.7.17
4.5.8
4.6.13
6.1.4
6.0.0beta2
6.2.20
6.2.7
4.6.17
6.0.0rc1
6.2.21
4.7.20
6.0.13
4.2.17
6.1.9
4.7.2
4.4.1
6.0.8
7.6.4
6.0.6
4.5.4
4.4.10
6.2.23
6.2.10rc1
4.5.7
4.5.20
4.5.29
6.2.2
4.5.11
6.0.0beta1
4.4.4
6.2.17
4.7.14
4.5.5
6.1.0rc1
4.7.12
4.6.7
4.3.12
4.5.18
4.5.28
6.2.14
4.5.19
6.0.7
7.3.1
4.4.9
4.4.14
4.6.11
4.2.12
6.2.4
4.6.14
4.6.18
4.3.1
4.3.0
4.3.11
4.7.16
6.2.8
4.6.9
7.0.2
6.0.1
3.6.2
4.5.23
8.2.1
7.6.10
6.2.26
8.2.0
8.0.0
7.6.9
7.6.0
6.2.25
6.2.0
Vulnerabilities (250)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU147469 - Missing Authorization CVE-2026-77132 |
CWE-862 | Medium | 10.4.60, 11.5.54, 12.4.49, 13.4.35, 14.3.7 | 08.09.2026 |
SB2026090863 |
||
| #VU147468 - Missing Authorization CVE-2026-85400 |
CWE-862 | Low | 14.3.7 | 08.09.2026 |
SB2026090863 |
||
| #VU144252 - Origin Validation Error CVE-2026-19418 |
CWE-346 | Medium | 13.4.34, 14.3.6 | 19.08.2026 |
SB2026081939 |
||
| #VU138322 - Insufficient Type Distinction CVE-2026-15305 |
CWE-351 | Medium | 14.3.5 | 17.07.2026 |
SB2026071782 |
||
| #VU134920 - Missing Authorization CVE-2026-47343 |
CWE-862 | Medium | 10.4.57, 11.5.51, 12.4.46, 13.4.31, 14.3.3 | 19.06.2026 |
SB2026061963 |
||
| #VU134918 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2026-47347 |
CWE-601 | Medium | 10.4.57, 11.5.51, 12.4.46, 13.4.31, 14.3.3 | 19.06.2026 |
SB2026061963 |
||
| #VU134917 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-47348 |
CWE-79 | Low | 13.4.31, 14.3.3 | 19.06.2026 |
SB2026061963 |
||
| #VU134865 - Missing Authorization CVE-2026-47349 |
CWE-862 | Medium | 10.4.57, 11.5.51, 12.4.46, 13.4.31, 14.3.3 | 18.06.2026 |
SB2026061963 |
||
| #VU134858 - Missing Authorization CVE-2026-47350 |
CWE-862 | Medium | 13.4.31, 14.3.3 | 18.06.2026 |
SB2026061963 |
||
| #VU134850 - Exposure of sensitive information to an unauthorized actor CVE-2026-49742 |
CWE-200 | Medium | 10.4.57, 11.5.51, 12.4.46, 13.4.31, 14.3.3 | 18.06.2026 |
SB2026061963 |
||
| #VU134839 - Missing Authorization CVE-2026-47352 |
CWE-862 | Medium | 10.4.57, 11.5.51, 12.4.46, 13.4.31, 14.3.3 | 18.06.2026 |
SB2026061963 |
||
| #VU134749 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-49738 |
CWE-22 | Low | 10.4.57, 11.5.51, 12.4.46, 13.4.31, 14.3.3 | 17.06.2026 |
SB2026061963 |
||
| #VU134741 - Deserialization of Untrusted Data CVE-2026-49740 |
CWE-502 | Medium | 10.4.57, 11.5.51, 12.4.46, 13.4.31, 14.3.3 | 17.06.2026 |
SB2026061963 |
||
| #VU134729 - Missing Authorization CVE-2026-47346 |
CWE-862 | Medium | 10.4.57, 11.5.51, 12.4.46, 13.4.31, 14.3.3 | 17.06.2026 |
SB2026061963 |
||
| #VU134728 - Missing Authorization CVE-2026-49741 |
CWE-862 | Medium | 14.3.3 | 17.06.2026 |
SB2026061963 |
||
| #VU134727 - Missing Authorization CVE-2026-11607 |
CWE-862 | Medium | 10.4.57, 11.5.51, 12.4.46, 13.4.31, 14.3.3 | 17.06.2026 |
SB2026061963 |
||
| #VU134019 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-47344 |
CWE-79 | Medium | 10.4.57, 11.5.51, 12.4.46, 13.4.31, 14.3.3 | 09.06.2026 |
SB2026060949 SB2026061968 |
||
| #VU134018 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-47345 |
CWE-79 | Medium | 10.4.57, 11.5.51, 12.4.46, 13.4.31, 14.3.3 | 09.06.2026 |
SB2026060949 SB2026061968 |
||
| #VU126822 - Cleartext Storage of Sensitive Information CVE-2026-6553 |
CWE-312 | Medium | 14.3.0 | 22.04.2026 |
SB20260422178 |
||
| #VU121461 - Deserialization of Untrusted Data CVE-2026-0859 |
CWE-502 | Low | 10.4.55, 11.5.49, 12.4.41, 13.4.23, 14.0.2 | 14.01.2026 |
SB20260114124 |
Showing elements 1 - 20 out of 250