TYPO3 Project CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH TYPO3 Project CVE published 2026-10-20

CVE-2026-112239

CVE-2026-112239 is a high-severity vulnerability in a Typo3 extension. The extension's backend endpoint allows any authenticated backend user to change any property of any page, including access permissions and configuration, without checking user permissions or limiting which fields can be changed. This issue affects Typo3 installations with the vulnerable extension. Defenders should assess exposure and [truncated]