Skip to content

CVE record · 1 source

CVE-2026-112069

The extension no longer applied its access protection to files in file storages that use a non-default relative base path.

Vendor: TYPO3
Product: TYPO3
Exposure class: Web platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

5

CVE NVD 12d ago

The extension no longer applied its access protection to files in file storages that use a non-default relative base path.

The extension no longer applied its access protection to files in file storages that use a non-default relative base path. These files were served directly by the web server, without any authentication or permission check. The…

CVE-2026-112069 TYPO3