TYPO3-EXT-SA-2026-024: Broken Access Control in extension "femanager" (femanager)

PKSA-ys21-4vkn-ktz8 CVE-2026-77133

Affected version: >=13.0.0,<13.3.5|>=8.0.0,<8.4.2|>=7.0.0,<7.5.5|<6.4.5

Reported by:
FriendsOfPHP/security-advisories

TYPO3-EXT-SA-2026-024: Broken Access Control in extension "femanager" (femanager)

PKSA-2nc4-qstv-j2k4 CVE-2026-77134

Affected version: >=13.0.0,<13.3.5|>=8.0.0,<8.4.2|>=7.0.0,<7.5.5|<6.4.5

Reported by:
FriendsOfPHP/security-advisories

TYPO3-EXT-SA-2026-024: Information Disclosure in extension "femanager" (femanager)

PKSA-8rwj-778x-wr3q CVE-2026-77135

Affected version: >=13.0.0,<13.3.5|>=8.0.0,<8.4.2|>=7.0.0,<7.5.5|<6.4.5

Reported by:
FriendsOfPHP/security-advisories

[MEDIUM] Femanager extension for TYPO3 allows Insecure Direct Object Reference

PKSA-nbcd-j79h-9hxy CVE-2025-7900 GHSA-rc5f-3hfv-jxp2

Affected version: >=8.0.0,<8.3.1|>=7.0.0,<7.5.3|<6.4.2

Reported by:
GitHub