CVE-2026-112071

The TYPO3 Shop by coding.ms extension contains a Broken Access Control vulnerability (CWE-862) in its order cancellation function. The application accepts an order identifier from a request and processes the cancellation without verifying if the requester owns the order. Consequently, any site vi...

CVE-2026-112071 Broken Access Control in extension "TYPO3 Shop by coding.ms" (shop)

The order cancellation function accepts an order identifier from the request and acts on that order without checking that the caller owns it. Any site visitor can set orders that are still awaiting payment to "canceled". This requires a page that contains the shop's order plugin. Orders that are...

CVE-2026-113468 Broken Access Control in extension "TYPO3 Shop by coding.ms" (shop)

The payment notification endpoint for PayPal accepts incoming data without verifying that it comes from the payment provider. Any site visitor can overwrite the stored payment notification of an order that is still awaiting payment with arbitrary content. This requires a page that contains the...

CVE-2026-113468

The TYPO3 Shop by coding.ms extension contains a Broken Access Control vulnerability (CWE-862) in its PayPal payment notification endpoint. The application fails to verify that incoming data originates from the legitimate payment provider, allowing any site visitor to overwrite the stored payment...

CVE-2026-112239 Broken Access Control in extension "TYPO3 AI Integration Extension" (ns_t3ai)

The extension provides a backend endpoint that writes a submitted value into a submitted field of a submitted page record. It neither checks the user's permissions nor limits which fields can be changed. Any authenticated backend user can therefore change any property of any page, including its...

CVE-2026-112239

The TYPO3 AI Integration Extension (ns_t3ai) contains a Broken Access Control vulnerability. The extension provides a backend endpoint that writes submitted values into page records without verifying user permissions or limiting which fields can be modified. Consequently, any authenticated backen...

CVE-2026-112070 Broken Access Control in extension "Analytics" (analytics)

The AJAX routes of the extension do not check whether a backend user has access to the related module or dashboard widget. Any backend user can therefore retrieve analytics data of the sites they have page access to...

CVE-2026-112070

The Analytics extension (analytics) contains a Broken Access Control vulnerability due to a failure in the AJAX routes , which do not verify if a backend user has permission to access the associated module or dashboard widget. Consequently, any backend user can retrieve analytics data from sites ...

TYPO3-EXT-SA-2026-028: Broken Access Control in extension "FAL Protect" (fal_protect)

More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-028...

TYPO3-EXT-SA-2026-036: Broken Access Control in extension "TYPO3 Shop by coding.ms" (shop)

More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-036...

TYPO3-EXT-SA-2026-033: Broken Access Control in extension "TYPO3 Fluid-Form by coding.ms" (fluid_form)

More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-033...

TYPO3-EXT-SA-2026-036: Broken Access Control in extension "TYPO3 Shop by coding.ms" (shop)

More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-036...

TYPO3-EXT-SA-2026-035: Broken Access Control in extension "TYPO3 AI Integration Extension" (ns_t3ai)

More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-035...

TYPO3-EXT-SA-2026-031: Broken Access Control in extension "Analytics" (analytics)

More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-031...

WordPress ACF Extended plugin <= 0.9.2.7 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Peter Tang in WordPress Plugin ACF Extended versions = 0.9.2.7...

CVE-2026-98584

A flaw was found in the Linux kernel's network traffic control subsystem. A local user can exploit this vulnerability to cause an information disclosure of kernel stack data. When dumping text search filter configurations, the kernel fails to initialize a stack structure before copying it into...

CVE-2023-35794-WebSSH-Hijacking

CVE-2023-35794-WebSSH-Hijacking Repository contains description for CVE-2023-35794 discovered by Dodge Industrial Team for Dodge OPTIFY platfrom. CVE ID: CVE-2023-35794 Vendor: Cassia Networks Product: Access Controller Version: Cassia-AC-2.1.1.2303271039 Vulnerability: Incorrect Access Control...

CVE-2026-105298

Summary Before version 0.9.0, Pingora accepted HTTP/2 requests whose Host header differed from the :authority pseudo-header. Request filters, cache keys, and logs that read the request URI session.reqheader.uri saw the :authority value, but the upstream received the client-supplied Host value...

EUVD-2026-104695

Summary Before version 0.9.0, Pingora accepted HTTP/2 requests whose Host header differed from the :authority pseudo-header. Request filters, cache keys, and logs that read the request URI session.reqheader.uri saw the :authority value, but the upstream received the client-supplied Host value...

CVE-2026-105298 Pingora HTTP/2 :authority and Host header mismatch enables cache poisoning and host-based access control bypass

Summary Before version 0.9.0, Pingora accepted HTTP/2 requests whose Host header differed from the :authority pseudo-header. Request filters, cache keys, and logs that read the request URI session.reqheader.uri saw the :authority value, but the upstream received the client-supplied Host value...