Page 38

In focus

Pause the movement

1SecuritySeverity unknown
TYPO3-CORE-SA-2026-024: Security Misconfiguration in Form Framework
It has been discovered that TYPO3 CMS is susceptible to ignored upload storage configuration in the Form Framework.
TYPO3 Security Advisories 13.10.2026
2Core release
TYPO3 14.3.9 released (security release)
TYPO3 14.3.9 is available. Release type: security.
TYPO3 Core Releases 13.10.2026
3Official
TYPO3 14.3.9 security release published
AI summary
Version 14.3.9 of the TYPO3 Enterprise Content Management System has been released.
TYPO3 News 13.10.2026
4Extension
AiM 0.5.1 (aim)
Intelligent AI proxy for TYPO3
TER Extension Releases 13.10.2026
5Extension
LLMS TXT Generator 0.3.0 (ai_llms_txt)
Generates an llms.txt file according to the llmstxt.org specification and serves pages as Markdown, giving Large Language Models a structured, machine-readable view of your site.
TER Extension Releases 13.10.2026
6Extension
Powermail Captcha 3.4.0 (powermailcaptcha)
Captcha Extension for Powermail
TER Extension Releases 13.10.2026
1SecuritySeverity unknown
TYPO3-CORE-SA-2026-024: Security Misconfiguration in Form Framework
It has been discovered that TYPO3 CMS is susceptible to ignored upload storage configuration in the Form Framework.
TYPO3 Security Advisories 13.10.2026
2Core release
TYPO3 14.3.9 released (security release)
TYPO3 14.3.9 is available. Release type: security.
TYPO3 Core Releases 13.10.2026
3Official
TYPO3 14.3.9 security release published
AI summary
Version 14.3.9 of the TYPO3 Enterprise Content Management System has been released.
TYPO3 News 13.10.2026
4Extension
AiM 0.5.1 (aim)
Intelligent AI proxy for TYPO3
TER Extension Releases 13.10.2026
5Extension
LLMS TXT Generator 0.3.0 (ai_llms_txt)
Generates an llms.txt file according to the llmstxt.org specification and serves pages as Markdown, giving Large Language Models a structured, machine-readable view of your site.
TER Extension Releases 13.10.2026
6Extension
Powermail Captcha 3.4.0 (powermailcaptcha)
Captcha Extension for Powermail
TER Extension Releases 13.10.2026

SecurityHigh
TYPO3-CORE-SA-2026-017: Privilege Escalation & SQL Injection in Form Framework
It has been discovered that TYPO3 CMS is susceptible to broken access control.
TYPO3 Security Advisories 09.06.2026 TYPO3-CORE-SA-2026-017
SecurityLow
TYPO3-CORE-SA-2026-016: Broken Access Control in File Abstraction Layer
It has been discovered that TYPO3 CMS is susceptible to broken access control.
TYPO3 Security Advisories 09.06.2026 TYPO3-CORE-SA-2026-016
SecurityMedium
TYPO3-CORE-SA-2026-015: Broken Access Control in Backend API
It has been discovered that TYPO3 CMS is susceptible to broken access control.
TYPO3 Security Advisories 09.06.2026 TYPO3-CORE-SA-2026-015
SecurityMedium
TYPO3-CORE-SA-2026-014: Broken Access Control in Clipboard
It has been discovered that TYPO3 CMS is susceptible to broken access control.
TYPO3 Security Advisories 09.06.2026 TYPO3-CORE-SA-2026-014
SecurityHigh
TYPO3-CORE-SA-2026-013: Broken Access Control in Media Module
It has been discovered that TYPO3 CMS is susceptible to broken access control.
TYPO3 Security Advisories 09.06.2026 TYPO3-CORE-SA-2026-013
SecurityMedium
TYPO3-CORE-SA-2026-012: Broken Access Control in DataHandler
It has been discovered that TYPO3 CMS is susceptible to broken access control.
TYPO3 Security Advisories 09.06.2026 TYPO3-CORE-SA-2026-012
SecurityMedium
TYPO3-CORE-SA-2026-011: Broken Access Control in Recycler
It has been discovered that TYPO3 CMS is susceptible to broken access control.
TYPO3 Security Advisories 09.06.2026 TYPO3-CORE-SA-2026-011
SecurityMedium
TYPO3-CORE-SA-2026-010: Cross-Site Scripting in Indexed Search
It has been discovered that TYPO3 CMS is vulnerable to cross-site scripting.
TYPO3 Security Advisories 09.06.2026 TYPO3-CORE-SA-2026-010
SecurityMedium
TYPO3-CORE-SA-2026-009: Open Redirect in TYPO3 CMS
It has been discovered that TYPO3 CMS is susceptible to open redirect.
TYPO3 Security Advisories 09.06.2026 TYPO3-CORE-SA-2026-009
SecurityHigh
TYPO3-CORE-SA-2026-008: Broken Access Control in Form Framework
It has been discovered that TYPO3 CMS is susceptible to broken access control.
TYPO3 Security Advisories 09.06.2026 TYPO3-CORE-SA-2026-008
SecurityHigh
TYPO3-CORE-SA-2026-007: Broken Access Control in File Abstraction Layer
It has been discovered that TYPO3 CMS is susceptible to broken access control.
TYPO3 Security Advisories 09.06.2026 TYPO3-CORE-SA-2026-007
SecurityMedium
TYPO3-CORE-SA-2026-006: By-passing Cross-Site Scripting Protection in HTML Sanitizer
It has been discovered that TYPO3 CMS is vulnerable to cross-site scripting.
TYPO3 Security Advisories 09.06.2026 TYPO3-CORE-SA-2026-006
Blog
Case Study SEEBURGER AG: Auch in China schnell
in2code 08.06.2026
Forum
TYPO3-Metriken mit Prometheus | SimpleCMP - Consent Manager | TYPO3 Meetup München am 8.6.2026 um 19 Uhr
AI summary
The next TYPO3 Meetup in Munich is scheduled for June 8, 2026, at 19:00, featuring topics such as TYPO3 metrics with Prometheus presented by Christian Spoo and the SimpleCMP consent manager for static sites.
talk.typo3.org 27.05.2026
Video
TYPO3 Award Gala 2025 – A Night To Remember | T3CON25
AI summary
The TYPO3 Award Gala 2025 will take place during T3CON25, celebrating outstanding contributions to the TYPO3 community.
TYPO3 on YouTube 24.05.2026
Blog
Notes from Atlanta—What the First TYPO3 Summit North America Says About the Next Decade of Enterprise CMS
b13 Blog (EN) 22.05.2026
Blog
Notes from Atlanta—What the First TYPO3 Summit North America Says About the Next Decade of Enterprise CMS
b13 Blog (EN) 22.05.2026
Forum
How to access TYPO3 Request Object and frontend.page.information in PageTitleProvider?
Stack Overflow: typo3 22.05.2026
Video
Introducing the TYPO3 Certification Bundle – Booking your next TYPO3 exam
AI summary
TYPO3 has launched the Certification Bundle, which allows developers to book and manage their certification exams easily through an online platform.
TYPO3 on YouTube 21.05.2026
Blog
CMS Meetup Atlanta: Why Governance Is Quietly Becoming the Deciding Factor for Enterprise CMS
b13 Blog (EN) 20.05.2026
Blog
CMS Meetup Atlanta: Why Governance Is Quietly Becoming the Deciding Factor for Enterprise CMS
b13 Blog (EN) 20.05.2026
SecurityCritical
TYPO3-EXT-SA-2026-013: Remote Code Execution in extension "Content Element Selector" (ceselector)
It has been discovered that the extension "Content Element Selector" (ceselector) is vulnerable to Remote Code Execution.
TYPO3 Security Advisories 19.05.2026 TYPO3-EXT-SA-2026-013
SecurityHigh
TYPO3-EXT-SA-2026-012: SQL Injection in extension "Address List" (tt_address)
It has been discovered that the extension "Address List" (tt_address) is vulnerable to SQL Injection.
TYPO3 Security Advisories 19.05.2026 TYPO3-EXT-SA-2026-012
SecurityMedium
TYPO3-EXT-SA-2026-011: Multiple vulnerabilities in extension "Faceted Search" (ke_search)
It has been discovered that the extension "Faceted Search" (ke_search) is vulnerable to XML External Entity injection, Path Traversal and Information Disclosure.
TYPO3 Security Advisories 19.05.2026 TYPO3-EXT-SA-2026-011
SecurityHigh
TYPO3-EXT-SA-2026-010: SQL Injection in extension "News system" (news)
It has been discovered that the extension "News system" (news) is vulnerable to SQL Injection.
TYPO3 Security Advisories 19.05.2026 TYPO3-EXT-SA-2026-010
SecurityMedium
TYPO3-EXT-SA-2026-009: Broken Access Control in extension "Frontend User Registration" (sf_register)
It has been discovered that the extension "Frontend User Registration" (sf_register) is vulnerable to Broken Access Control.
TYPO3 Security Advisories 19.05.2026 TYPO3-EXT-SA-2026-009
SecurityHigh
TYPO3-EXT-SA-2026-008: Remote Code Execution in extension "Site Crawler" (crawler)
It has been discovered that the extension "Site Crawler" (crawler) is vulnerable to Remote Code Execution.
TYPO3 Security Advisories 19.05.2026 TYPO3-EXT-SA-2026-008
Blog
How to Prevent UX Sprawl in Existing Digital Products
b13 Blog (EN) 15.05.2026
Blog
How to Prevent UX Sprawl in Existing Digital Products
b13 Blog (EN) 15.05.2026
Blog
Not Bad. But Have You Ever Been to the TYPO3 Camp in Baden-Württemberg?
b13 Blog (EN) 13.05.2026

Security advisories, releases and news from the TYPO3 ecosystem

In focus