401396 matches found
EUVD-2026-104872
The extension hides the correct answer to each CAPTCHA inside the image data of the CAPTCHA itself. Anyone who can request a CAPTCHA image can read the answer from it and submit it, so automated clients can pass the challenge. This applies to the default configuration, because the audio feature...
CVE-2026-112238
The ameos_filemanager extension contains an SQL Injection vulnerability (CWE-89) within its file search functionality. The application fails to escape quote characters when building database conditions, only escaping wildcard characters for the LIKE operator. Consequently, a crafted search term c...
EUVD-2026-104867
The file search of the extension builds its database conditions by wrapping the search term in quotes itself. Only the wildcard characters of the LIKE operator are escaped, quote characters are not. A crafted search term can therefore leave the intended string value and change the database query...
CVE-2026-112238 SQL Injection in extension "File manager" (ameos_filemanager)
The file search of the extension builds its database conditions by wrapping the search term in quotes itself. Only the wildcard characters of the LIKE operator are escaped, quote characters are not. A crafted search term can therefore leave the intended string value and change the database query...
CVE-2026-112238
The file search of the extension builds its database conditions by wrapping the search term in quotes itself. Only the wildcard characters of the LIKE operator are escaped, quote characters are not. A crafted search term can therefore leave the intended string value and change the database query...
CVE-2026-112238 SQL Injection in extension "File manager" (ameos_filemanager)
The file search of the extension builds its database conditions by wrapping the search term in quotes itself. Only the wildcard characters of the LIKE operator are escaped, quote characters are not. A crafted search term can therefore leave the intended string value and change the database query...
CVE-2026-113459
The TYPO3 AI Integration Extension (ns_t3ai) running on TYPO3 10 and 11 contains a Sensitive Data Exposure vulnerability. The root cause is that the configured OpenAI API key is embedded in every backend page to allow the editor plugin to contact the service directly from the browser. Consequentl...
CVE-2026-113459 Sensitive Data Exposure in extension "TYPO3 AI Integration Extension" (ns_t3ai)
In versions running on TYPO3 10 and 11, the configured OpenAI API key is embedded in every backend page, so that the editor plugin can contact the OpenAI service directly from the browser. Any authenticated backend user can read the key and use it at the expense of the site operator. This only...
CVE-2026-113459 Sensitive Data Exposure in extension "TYPO3 AI Integration Extension" (ns_t3ai)
In versions running on TYPO3 10 and 11, the configured OpenAI API key is embedded in every backend page, so that the editor plugin can contact the OpenAI service directly from the browser. Any authenticated backend user can read the key and use it at the expense of the site operator. This only...
CVE-2026-112070
The Analytics extension (analytics) contains a Broken Access Control vulnerability due to a failure in the AJAX routes , which do not verify if a backend user has permission to access the associated module or dashboard widget. Consequently, any backend user can retrieve analytics data from sites ...
CVE-2026-112070 Broken Access Control in extension "Analytics" (analytics)
The AJAX routes of the extension do not check whether a backend user has access to the related module or dashboard widget. Any backend user can therefore retrieve analytics data of the sites they have page access to...
EUVD-2026-104862
The AJAX routes of the extension do not check whether a backend user has access to the related module or dashboard widget. Any backend user can therefore retrieve analytics data of the sites they have page access to...
CVE-2026-112070 Broken Access Control in extension "Analytics" (analytics)
The AJAX routes of the extension do not check whether a backend user has access to the related module or dashboard widget. Any backend user can therefore retrieve analytics data of the sites they have page access to...
CVE-2026-112070
The AJAX routes of the extension do not check whether a backend user has access to the related module or dashboard widget. Any backend user can therefore retrieve analytics data of the sites they have page access to...
CVE-2026-113469
A failure has been identified in the SNS during dynamic data files signature check. A logic error in the signature verification routine resulting in acceptance of unauthenticated dynamic data update during Autoupdate routine...
EUVD-2026-104850
A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data...
TYPO3-EXT-SA-2026-035: Sensitive Data Exposure in extension "TYPO3 AI Integration Extension" (ns_t3ai)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-035...
BIT-GRAFANA-2026-93294 Azure Monitor data source resource proxy allows calls to arbitrary Azure Resource Manager APIs
A user with query access to an Azure Monitor data source can use its resource proxy to call Azure Resource Manager APIs beyond those Grafana needs, with the data source's Azure identity unintended proxy. The impact is bounded by the Azure role granted to that identity...
CVE-2026-113469
The SNS is vulnerable to a logic error in its signature verification routine . This flaw allows the system to accept unauthenticated dynamic data updates during the Autoupdate routine . The vulnerability (CWE-287) can lead to high impacts on confidentiality , integrity , and availability (CVSS 3....
EUVD-2026-104841
A failure has been identified in the SNS during dynamic data files signature check. A logic error in the signature verification routine resulting in acceptance of unauthenticated dynamic data update during Autoupdate routine...