[MEDIUM] TYPO3 CMS has Broken Access Control in the Recycler Module

PKSA-9psw-d46q-t3cr CVE-2026-47349 GHSA-f34x-rx2w-7pm3

Affected version: >=14.0.0,<14.3.3|>=13.0.0,<13.4.31|>=12.0.0,<12.4.46|>=11.0.0,<11.5.51|<10.4.57

Reported by:
GitHub

[HIGH] TYPO3 CMS Allows Broken Access Control in Recycler Module

PKSA-kq4c-tzdn-3hmx CVE-2025-59022 GHSA-p52w-7rhw-9m67

Affected version: >=10.0.0,<=10.4.54|>=11.0.0,<=11.5.48|>=12.0.0,<=12.4.40|>=13.0.0,<=13.4.22|>=14.0.0,<=14.0.1

Reported by:
GitHub

[MEDIUM] TYPO3 backend modules have Broken Access Control

PKSA-f42m-jd1s-wkh5 CVE-2025-59017 GHSA-2fhw-2j7m-mr4m

Affected version: >=13.0.0,<13.4.18|>=12.0.0,<12.4.37|>=11.0.0,<11.5.48|>=10.0.0,<10.4.54|>=9.0.0,<9.5.55

Reported by:
GitHub