Known vulnerabilities in TYPO3 13.4.26
Vendor:
TYPO3
Software:
TYPO3
Version:
13.4.26
Software CPE:
cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*
Website:
https://typo3.org/
Total vulnerabilities:
15
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.7
Vulnerabilities by Severity
12.4.49
12.4.48
12.4.47
11.5.54
11.5.53
11.5.52
10.4.60
10.4.59
10.4.58
13.4.35
14.3.7
14.3.6
13.4.34
14.3.5
13.4.33
12.4.46
11.5.51
11.5.50
10.4.57
10.4.56
14.3.4
13.4.32
14.3.3
13.4.31
14.3.2
13.4.30
14.3.1
13.4.29
14.3.0
13.4.28
12.4.45
14.2.0
13.4.27
12.4.44
14.1.1
13.4.26
12.4.43
13.4.25
14.1.0
13.4.24
12.4.42
11.5.49
10.4.55
14.0.2
13.4.23
12.4.41
13.4.22
14.0.1
13.4.21
12.4.40
14.0.0
13.4.20
12.4.39
13.4.19
12.4.38
10.4.54
10.4.53
10.4.52
10.4.51
9.5.55
9.5.54
9.5.53
9.5.52
11.5.48
11.5.47
11.5.46
11.5.45
13.4.18
12.4.37
13.4.17
12.4.36
13.4.16
12.4.35
13.4.15
12.4.34
13.4.14
12.4.33
13.4.13
12.4.32
9.5.51
9.5.50
11.5.44
11.5.43
10.4.50
10.4.49
13.4.12
12.4.31
13.4.11
12.4.30
13.4.10
12.4.29
13.4.9
13.4.8
12.4.28
13.4.7
13.4.6
13.4.5
12.4.27
13.4.4
12.4.26
9.5.49
10.4.48
10.4.47
11.5.42
13.4.3
12.4.25
13.4.2
12.4.24
13.4.1
12.4.23
12.4.22
11.5.41
13.4.0
10.4.46
13.3.1
12.4.21
11.5.40
13.3.0
12.4.20
12.4.19
12.4.18
11.5.39
12.4.17
13.2.1
13.2.0
12.4.16
11.5.38
10.4.45
10.4.44
9.5.48
9.5.47
13.1.1
12.4.15
11.5.37
13.1.0
12.4.14
12.4.13
12.4.12
11.5.36
10.4.43
10.4.42
9.5.46
9.5.45
8.7.57
8.7.56
13.0.1
12.4.11
11.5.35
13.0.0
12.4.10
11.5.34
12.4.9
9.5.44
9.5.43
10.4.41
10.4.40
8.7.55
8.7.54
8.7.53
8.7.52
12.4.8
11.5.33
12.4.7
11.5.32
12.4.6
11.5.31
12.4.5
10.4.39
10.4.38
9.5.42
9.5.41
12.4.4
11.5.30
12.4.3
11.5.29
12.4.2
11.5.28
12.4.1
11.5.27
12.4.0
11.5.26
10.4.37
12.3.0
11.5.25
11.5.24
10.4.35
8.7.50
9.5.39
12.2.0
11.5.23
10.4.36
9.5.40
8.7.51
11.5.22
12.1.3
11.5.21
10.4.34
8.7.49
9.5.38
12.1.2
12.1.1
11.5.20
10.4.33
12.1.0
11.5.19
11.5.18
11.5.17
12.0.0
8.7.48
7.6.58
9.5.37
9.5.36
11.5.16
10.4.32
11.5.15
11.5.14
11.5.13
10.4.31
11.5.12
10.4.30
7.6.57
7.6.56
7.6.55
7.6.54
8.7.47
8.7.46
8.7.45
8.7.44
8.7.43
9.5.35
9.5.34
9.5.33
9.5.32
11.5.11
10.4.29
11.5.10
10.4.28
11.5.9
10.4.27
11.5.8
10.4.26
11.5.7
10.4.25
11.5.6
10.4.24
11.5.5
10.4.23
11.5.4
10.4.22
11.5.3
11.5.2
11.5.1
11.5.0
9.5.31
10.4.21
11.4.0
9.5.30
10.4.20
11.3.3
8.7.42
7.6.53
9.5.29
10.4.19
11.3.2
8.7.41
7.6.52
9.5.28
10.4.18
11.3.1
11.3.0
10.4.17
9.5.27
10.4.16
11.2.0
10.4.15
9.5.26
6.2.56
6.2.57
8.7.39
7.6.50
11.1.1
10.4.14
9.5.25
8.7.40
7.6.51
11.1.0
10.4.13
10.4.12
11.0.0
9.5.24
10.4.11
6.2.54
6.2.53
6.2.50
6.2.49
6.2.48
6.2.47
6.2.46
6.2.45
6.2.44
6.2.43
6.2.42
6.2.41
6.2.40
7.6.48
7.6.47
7.6.46
7.6.45
7.6.44
7.6.43
7.6.42
7.6.41
7.6.40
7.6.39
7.6.38
7.6.37
7.6.36
7.6.35
7.6.34
7.6.33
8.7.38
8.7.37
8.7.36
8.7.35
8.7.34
8.7.33
9.5.23
10.4.10
9.5.21
10.4.7
10.4.8
9.5.22
10.4.9
6.2.52
6.2.51
9.5.20
10.4.6
10.4.5
9.5.19
10.4.4
9.5.18
10.4.3
9.5.17
10.4.2
9.5.16
10.4.1
10.4.0
9.5.15
8.7.32
10.3.0
9.5.14
8.7.31
6.2.38 ELTS
9.5.13
10.2.2
8.7.30
9.5.12
10.2.1
10.2.0
8.7.29
9.5.11
8.7.28
9.5.10
10.1.0
9.5.9
10.0.0
8.7.26
8.7.27
9.5.7
9.5.8
9.5.6
9.5.5
8.7.25
8.7.24
6.0.0
4.1.1
4.1.0
4.0.0
3.6.1
9.5.4
9.5.3
9.5.0
9.4.0
9.3.2
8.7.23
8.7.22
8.7.19
8.7.18
6.2.39
6.2.38
6.2.37
6.2.36
6.2.35
6.2.34
6.2.33
6.2.32
6.2.31
6.2.30
6.2.29
6.2.28
6.2.27
7.6.31
9.5.1
8.7.20
9.5.2
8.7.21
7.6.32
9.3.3
9.3.1
9.3.0
9.2.1
8.7.17
8.7.16
8.7.15
8.7.14
8.7.1
8.7.0
7.6.30
7.6.29
7.6.28
7.6.27
8.7.13
9.2.0
9.1.0
9.0.0
8.7.12
8.7.11
8.7.10
8.7.9
8.7.8
8.7.7
8.7.6
7.6.26
7.6.25
7.6.24
7.6.23
8.7.5
7.6.22
8.7.4
8.7.3
8.7.2
7.6.21
7.6.20
7.6.19
7.6.18
7.6.17
8.6.1
8.6.0
8.5.1
8.5.0
8.4.1
8.4.0
8.3.1
8.3.0
7.6.16
7.6.15
7.6.14
7.6.13
7.6.12
7.6.11
1.1.2
0.4.1
0.4.0
7.0.1
6.2
6.1
6.0
4.2.7
4.1.11
3.5
4.3alpha1
4.2.4
4.2.5
4.2.3
4.2.6
4.0.9
4.1.10
4.3
4.5
4.10
4.11
4.8
4.4
4.7
4.6
4.9
1.1.10
4.1.9
4.1.7
4.1.8
1.3.2
4.0.11
4.0.12
1.1.1
1.0.14
1.3.0
4.0.10
4.2.1
4.2.0
4.2.2
4.2
4.1.5
4.1.6
4.1.4
4.0.8
1.2.0
0.1.2
1.1.09
4.0.6
4.0.7
4.1.3
4.0.5
4.1.2
3.0
4.1
4.0.4
3.8
4.0.3
4.0.2
4.0.1
4.0
1.1
3.8.0
3.7.0
4.6.6
4.2.9
6.2.0beta2
4.7.3
4.7.7
4.5.14
4.6.0beta3
4.6.0alpha1
6.1.5
4.6.0alpha3
4.5.34
4.4.0
4.6.8
6.2.0alpha2
7.6.6
4.0.13
6.2.13
6.2.0beta7
6.2.0beta6
4.5.1
6.2.0rc1
4.7.0
4.7.0beta1
4.5.6
4.4.3
4.6.5
4.5.39
4.5.9
4.7.0beta2
6.1.6
6.2.15
4.6.10
7.6.3
7.1.0
4.6.0rc1
6.1.3
4.7.9
4.3.6
7.5.0
4.7.10
4.5.36
7.6.7
6.1.0beta2
4.6.2
4.7.0beta3
4.3.10
4.4.2
6.0.10
4.2.15
3.7.1
6.2.16
4.7.11
4.6.16
6.2.1
4.7.0alpha1
4.5.30
4.5.17
6.2.0beta5
6.1.10
4.5.21
4.5.12
6.1.1
6.0.5rc1
4.6.0
6.1.11
4.6.12
4.5.27
4.7.4
4.6.1
8.0.1
6.1.0
3.5.0
4.1.15
6.2.19
6.0.0alpha1
4.6.3
4.5.0
4.2.16
6.2.11
7.6.8
7.6.1
4.5.35
4.3.8
8.1.0
6.2.9
4.7.0rc1
4.5.38
4.4.6
4.5.40
4.4.11
7.4.0
6.0.0rc2
4.7.13
4.5.31
7.6.2
4.5.33
6.1.0beta1
6.1.7
4.2.13
6.1.12
4.5.22
4.7.19
4.5.2
4.5.13
6.2.0beta3
4.1.12
4.7.0alpha2
7.0.0
3.8.1
6.0.14
4.6.4
4.7.0alpha3
6.0.2
7.3.0
6.2.5
7.2.0
4.6.0beta1
4.7.0rc2
4.5.24
6.2.10
4.6.15
4.3.7
4.2.14
6.2.0alpha1
6.2.3
4.3.5
4.3.13
4.4.13
4.2.11
4.5.37
4.2.10
6.2.0rc2
3.3.0
4.5.16
6.0.0alpha3
4.5.25
4.7.1
4.3.4
4.1.14
4.3.3
6.2.22
8.1.2
6.2.0beta4
6.1.8
4.5.26
4.4.5
4.7.18
4.3.2
4.4.15
4.5.10
6.0.9
8.1.1
4.2.8
4.5.3
4.6.0alpha2
4.7.6
6.1.2
6.2.18
4.5.15
4.1.13
7.6-snapshot-20160223
6.2.6
6.1.0alpha1
7.6.5
4.4.8
4.6.0beta2
4.4.12
6.0.5
4.7.15
6.2.0beta1
4.3.9
6.2.24
4.5.32
6.2.12
4.7.5
6.0.4
6.0.3
6.0.11
4.7.11rc1
6.2.0alpha3
6.0.12
6.0.0alpha2
4.4.7
4.3.14
4.7.8
4.5.26rc1
4.7.17
4.5.8
4.6.13
6.1.4
6.0.0beta2
6.2.20
6.2.7
4.6.17
6.0.0rc1
6.2.21
4.7.20
6.0.13
4.2.17
6.1.9
4.7.2
4.4.1
6.0.8
7.6.4
6.0.6
4.5.4
4.4.10
6.2.23
6.2.10rc1
4.5.7
4.5.20
4.5.29
6.2.2
4.5.11
6.0.0beta1
4.4.4
6.2.17
4.7.14
4.5.5
6.1.0rc1
4.7.12
4.6.7
4.3.12
4.5.18
4.5.28
6.2.14
4.5.19
6.0.7
7.3.1
4.4.9
4.4.14
4.6.11
4.2.12
6.2.4
4.6.14
4.6.18
4.3.1
4.3.0
4.3.11
4.7.16
6.2.8
4.6.9
7.0.2
6.0.1
3.6.2
4.5.23
8.2.1
7.6.10
6.2.26
8.2.0
8.0.0
7.6.9
7.6.0
6.2.25
6.2.0
Vulnerabilities (15)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU147469 - Missing Authorization CVE-2026-77132 |
CWE-862 | Medium | 10.4.60, 11.5.54, 12.4.49, 13.4.35, 14.3.7 | 08.09.2026 |
SB2026090863 |
||
| #VU144252 - Origin Validation Error CVE-2026-19418 |
CWE-346 | Medium | 13.4.34, 14.3.6 | 19.08.2026 |
SB2026081939 |
||
| #VU134920 - Missing Authorization CVE-2026-47343 |
CWE-862 | Medium | 10.4.57, 11.5.51, 12.4.46, 13.4.31, 14.3.3 | 19.06.2026 |
SB2026061963 |
||
| #VU134918 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2026-47347 |
CWE-601 | Medium | 10.4.57, 11.5.51, 12.4.46, 13.4.31, 14.3.3 | 19.06.2026 |
SB2026061963 |
||
| #VU134917 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-47348 |
CWE-79 | Low | 13.4.31, 14.3.3 | 19.06.2026 |
SB2026061963 |
||
| #VU134865 - Missing Authorization CVE-2026-47349 |
CWE-862 | Medium | 10.4.57, 11.5.51, 12.4.46, 13.4.31, 14.3.3 | 18.06.2026 |
SB2026061963 |
||
| #VU134858 - Missing Authorization CVE-2026-47350 |
CWE-862 | Medium | 13.4.31, 14.3.3 | 18.06.2026 |
SB2026061963 |
||
| #VU134850 - Exposure of sensitive information to an unauthorized actor CVE-2026-49742 |
CWE-200 | Medium | 10.4.57, 11.5.51, 12.4.46, 13.4.31, 14.3.3 | 18.06.2026 |
SB2026061963 |
||
| #VU134839 - Missing Authorization CVE-2026-47352 |
CWE-862 | Medium | 10.4.57, 11.5.51, 12.4.46, 13.4.31, 14.3.3 | 18.06.2026 |
SB2026061963 |
||
| #VU134749 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-49738 |
CWE-22 | Low | 10.4.57, 11.5.51, 12.4.46, 13.4.31, 14.3.3 | 17.06.2026 |
SB2026061963 |
||
| #VU134741 - Deserialization of Untrusted Data CVE-2026-49740 |
CWE-502 | Medium | 10.4.57, 11.5.51, 12.4.46, 13.4.31, 14.3.3 | 17.06.2026 |
SB2026061963 |
||
| #VU134729 - Missing Authorization CVE-2026-47346 |
CWE-862 | Medium | 10.4.57, 11.5.51, 12.4.46, 13.4.31, 14.3.3 | 17.06.2026 |
SB2026061963 |
||
| #VU134727 - Missing Authorization CVE-2026-11607 |
CWE-862 | Medium | 10.4.57, 11.5.51, 12.4.46, 13.4.31, 14.3.3 | 17.06.2026 |
SB2026061963 |
||
| #VU134019 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-47344 |
CWE-79 | Medium | 10.4.57, 11.5.51, 12.4.46, 13.4.31, 14.3.3 | 09.06.2026 |
SB2026060949 SB2026061968 |
||
| #VU134018 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-47345 |
CWE-79 | Medium | 10.4.57, 11.5.51, 12.4.46, 13.4.31, 14.3.3 | 09.06.2026 |
SB2026060949 SB2026061968 |