T
Vendor security profile
TYPO3
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs31
Critical2
CISA KEV0
Public exploit0
Patch rate%6
Avg. CVSS7.1
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
25
5
1
CVE KEV
CVE severity distribution
31toplam CVE
Critical2 (6%)
High15 (48%)
Medium14 (45%)
Patch and exploitation view
%6
Verified patch
%0
CISA KEV
%0
Public exploit
2Patch available
0Partial
0Workaround
0Vendor: no patch
29Unknown
Latest vulnerabilities
6.3
CVE-2026-109162
TYPO3 CMS - Security Misconfiguration in Form Framework
T
Patch verifiedEPSS %1
4.2
CVE-2023-45023
Incorrect authorization in TYPO3 Femanager
T
Patch status unknownEPSS %0
5.4
CVE-2023-50459
Incorrect authorization in TYPO3 Femanager
T
Patch status unknownEPSS %0
5.3
CVE-2023-50462
Incorrect authorization in TYPO3 Content Consent
T
Patch status unknownEPSS %0
8.8
CVE-2023-50461
Incorrect authorization in TYPO3 Direct Mail
T
Patch status unknownEPSS %0
5.4
CVE-2023-50460
Incorrect authorization in TYPO3 Femanager
T
Patch status unknownEPSS %0
7.6
CVE-2026-56092
Broken Access Control in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)
T
Patch status unknownEPSS %0
6.3
CVE-2026-56093
Broken Access Control in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)
T
Patch status unknownEPSS %0
6.3
CVE-2026-56094
Information Disclosure in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)
T
Patch status unknownEPSS %0
7.7
CVE-2026-56095
Insecure Deserialization in extension "Apache Solr for TYPO3 - Enterprise Search" (solr)
T
Patch status unknownEPSS %0