Auth bypass in Typo3 Cms

CVE-2026-47343

Non-privileged backend users with file mount access were able to perform write operations (move, delete, rename) on folders representing the root of an active file mount due to missing authorization restrictions. This issue affects TYPO3 C…

Vulnerability class: Broken Access Control

EPSS: 0.002 (15.0th percentile) — read the EPSS interpretation.