Typo3 · Typo3/Cms · CVE-2026-47343
**Name of the Vulnerable Software and Affected Versions**
TYPO3 CMS versions prior to 10.4.57
TYPO3 CMS versions 11.0.0 through 11.5.50
TYPO3 CMS versions 12.0.0 through 12.4.45
TYPO3 CMS versions 13.0.0 through 13.4.30
TYPO3 CMS versions 14.0.0 through 14.3.2
**Description**
Non-privileged backend users with file mount access can perform unauthorized write operations, including moving, deleting, and renaming folders that represent the root of an active file mount, due to missing authorization restrictions.
**Recommendations**
Update to version 10.4.57 or later.
Update to version 11.5.51 or later.
Update to version 12.4.46 or later.
Update to version 13.4.31 or later.
Update to version 14.3.3 or later.