Skip to content
Threat Feed
Subscribe

Product

TYPO3 CMS (14.0.0 - 14.3.5)

1 brief RSS
medium advisory

Broken Access Control in TYPO3 CMS Backend and Install Tool

TYPO3 CMS versions 13.0.0 through 13.4.33 and 14.0.0 through 14.3.5 contain a broken access control vulnerability (CVE-2026-19418) that allows attackers to perform unauthorized actions by abusing ineffective referrer enforcement.

TYPO3 CMS +1 web-application cms vulnerability cve-2026-19418
2t