Auth bypass in TYPO3 Cms
CVE-2026-47352
Authenticated backend users were able to retrieve file metadata via several Backend API routes without proper permission checks, allowing access to files outside their permitted file mounts or storages. This issue affects TYPO3 CMS versions before 10.4.57, 11.0.0-11.5.50, 12.0.0-12.4.45, 13.0.0-13.4.30 and 14.0.0-14.3.2.
Vulnerability class: Broken Access Control
Published · last modified .
EPSS exploit prediction
EPSS: 0.004 (33.1th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 33rd percentile — 33.1% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.002 · newest: 0.004 · change: +0.002
Affected products
- TYPO3 Cms — versions 0, 11.0.0, 12.0.0
Weakness classification (CWE)
References
- f4fb688c-4412-4426-b4b8-421ecf27b14a (patch)
- f4fb688c-4412-4426-b4b8-421ecf27b14a (patch)
- f4fb688c-4412-4426-b4b8-421ecf27b14a (vendor-advisory)