TYPO3 Extensions: Mehrere Schwachstellen
NEOSEC enrichment — no mirror of the original source
Ein Angreifer kann mehrere Schwachstellen in TYPO3 Extension ausnutzen, um Dateien zu manipulieren, um Informationen offenzulegen, um einen SQL-Injection Angriff durchzuführen, um einen Cross-Site Scripting Angriff durchzuführen und um Sicherheitsvorkehrungen zu umgehen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Mediumbsi:WID-SEC-2026-40534 linked CVEs
Open advisory with all CVEs
More on Extensions
Other advisories
- CriticalCVE-2026-114630ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: Pfadüberschreitung (Path Traversal)
- CriticalCVE-2026-114630ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: Pfadüberschreitung (Path Traversal)
- MediumCVE-2026-115740Trellix DLP on-prem extensions: Server-Side-Request-Forgery (SSRF)
- MediumCVE-2026-115739Trellix DLP on-prem extensions: hartcodierter kryptografischer Schlüssel
- MediumCVE-2026-115740Trellix DLP on-prem extensions: Server-Side-Request-Forgery (SSRF)
- HighCVE-2026-115738Trellix DLP on-prem extensions: SQL-Injection
- MediumCVE-2026-115739Trellix DLP on-prem extensions: hartcodierter kryptografischer Schlüssel
- HighCVE-2026-115738Trellix DLP on-prem extensions: SQL-Injection
Other news entries
- Malicious Browser Extensions Could Use Claude Dispatch to Run Code on Users' ComputersNewsThe Hacker News
- Chrome extensions with 13.4 million installs caught hijacking searchesNewsBleepingComputer
- TYPO3 Extensions: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- 16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets to Steal Recovery PhrasesNewsThe Hacker News
- The EDR blind spot: 3 ways browser attacks evade endpoint telemetryNewsBleepingComputer
- MediaWiki Extensions: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- MediaWiki Extensions: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- BragJack attacks hijack AI browser agents through malicious extensionsNewsBleepingComputer
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4053
ID