Product by TYPO3
Extension Modules
21 known vulnerabilities in Extension Modules (TYPO3), 0 of them actively exploited (CISA KEV).
Key figures
21
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-77138 | TYPO3 Extension "HTML5 Video Player vs. Powermail": Deserialization of Untrusted Data | — | |
| High | CVE-2026-77141 | Broken Access Control in extension "Club Directory" (clubdirectory) | — | |
| High | CVE-2026-77142 | Broken Access Control in extension "Industry Directory" (yellowpages2) | — | |
| High | CVE-2026-77140 | Broken Access Control in extension "Telephone Directory" (telephonedirectory) | — | |
| High | CVE-2026-77146 | Broken Access Control in extension "femanager" (femanager) | — | |
| High | CVE-2026-77134 | Broken Access Control in extension "femanager" (femanager) | — | |
| High | CVE-2026-77135 | Information Disclosure in extension "femanager" (femanager) | — | |
| High | CVE-2026-77129 | Server-Side Template Injection in extension "Event management and registration" (sf_event_mgt) | — | |
| High | CVE-2026-77137 | SQL Injection in extension "Forms Export" (frp_form_answers) | — | |
| Medium | CVE-2026-77128 | Broken Access Control in extension "Event management and registration" (sf_event_mgt) | — | |
| High | CVE-2026-56095 | Insecure Deserialization in extension "Apache Solr for TYPO3 - Enterprise Search" (solr) | — | |
| Medium | CVE-2026-56096 | Information Disclosure in extension "Apache Solr for TYPO3 - Enterprise Search" (solr) | — | |
| High | CVE-2026-56092 | Broken Access Control in extension "Apache Solr for TYPO3 - Enterprise Search" (solr) | — | |
| Medium | CVE-2026-77139 | Path Traversal in extension "Mask" (mask) | — | |
| Medium | CVE-2026-56094 | Information Disclosure in extension "Apache Solr for TYPO3 - Enterprise Search" (solr) | — | |
| Medium | CVE-2026-77127 | Information Disclosure in extension "Modules" (modules) | — | |
| Medium | CVE-2026-77133 | Broken Access Control in extension "femanager" (femanager) | — | |
| Medium | CVE-2026-56093 | Broken Access Control in extension "Apache Solr for TYPO3 - Enterprise Search" (solr) | — | |
| High | CVE-2025-12998 | Broken Authentication in extension “Modules” (modules) | — | |
| Medium | CVE-2026-77130 | Insufficient Session Expiration in extension "SYSSY - TYPO3 Monitoring & Security Checks" (syssy) | — | |
| Medium | CVE-2026-77131 | TYPO3 Extension "SYSSY - TYPO3 Monitoring & Security Checks": Cleartext Transmission of Sensitive Information | — |