CVE-2026-112069
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk45th percentile - higher than 45% of all known CVEs
Summary
The extension no longer applied its access protection to files in file storages using a non-default relative base path. These files were served directly by the web server without authentication or permission checks. The issue is only exploitable when the extension is used on a website running TYPO3 14.3.
Risk Assessment
An unauthenticated user can access files that should be protected, potentially leading to data leakage.
Recommendation
Apply the fix restoring access protection for storages with non-default base paths and review file storage configuration.
Other vulnerabilities in TYPO3 extension
See all- CVE-2026-77138Critical
The extension fails to safely process untrusted client input from an attacker-controlled cookie directly into PHP's unserialize(). A remote, unauthenticated attacker can supply a crafted serialized payload to trigger PHP Object Injection, leading to Remote Code Execution on the TYPO3 server.
- CVE-2026-46725Critical
The extension passes an attacker-controlled cookie directly to PHP's unserialize() without safely processing the input. A remote, unauthenticated attacker can supply a crafted serialized payload to trigger PHP Object Injection, leading to Remote Code Execution on the TYPO3 server.
- CVE-2026-56092High
The extension forces empty frontend-group and subpage-inheritance restrictions onto page records during indexer sub-requests, and this forged state was persisted into the shared rootline cache, allowing anonymous visitors to bypass extendToSubpages-inherited access restrictions on cached pages.
Original NVD description (English source)
The extension no longer applied its access protection to files in file storages that use a non-default relative base path. These files were served directly by the web server, without any authentication or permission check. The issue is only exploitable when the extension is used on a website running TYPO3 14.3.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS