typo3 vulnerabilities

CVEs per yearBy the year they were published

1. 201912
2. 202013
3. 202115
4. 202217
5. 20237
6. 20249
7. 202537
8. 202688

Newest CVEs

• CVE-2026-120327

  Open Redirection in extension "Mail" (mail)

  TYPO3 · Extension "Mail"

  Medium5.3
• CVE-2026-120328

  Information Disclosure in extension "Mail" (mail)

  TYPO3 · Extension "Mail"

  Medium6.9
• CVE-2026-120329

  Broken Access Control in extension "Mail" (mail)

  TYPO3 · Extension "Mail"

  Medium5.3
• CVE-2026-120330

  Broken Access Control in extension "Mail" (mail)

  TYPO3 · Extension "Mail"

  High7.1
• CVE-2026-120331

  Server-Side Request Forgery in extension "Mail" (mail)

  TYPO3 · Extension "Mail"

  Medium5.3
• CVE-2026-120332

  Cross-Site Scripting in extension "Mail" (mail)

  TYPO3 · Extension "Mail"

  Medium5.1
• CVE-2026-120333

  Broken Access Control in extension "Frontend User Registration" (sf_register)

  TYPO3 · Extension "Frontend User Registration"

  High8.8
• CVE-2026-112069

  Broken Access Control in extension "FAL Protect" (fal_protect)

  TYPO3 · Extension "FAL Protect"

  Medium6.3
• CVE-2026-112065

  Missing Authorization in extension "sgalinski Cookie Consent" (sg_cookie_optin)

  TYPO3 · Extension "sgalinski Cookie Consent"

  Medium5.3
• CVE-2026-112064

  SQL Injection in extension "sgalinski Cookie Consent" (sg_cookie_optin)

  TYPO3 · Extension "sgalinski Cookie Consent"

  High7.1