PT-2026-47743 · Typo3 · Typo3/Cms

Hyunseo Shin + 1 · Published 2026-06-09 · Updated 2026-06-09 · CVE-2026-47350

Positive Technologies (AI Summary)

CVSS v4.0

5.3

Medium

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions TYPO3 CMS versions 13.0.0 through 13.4.31 TYPO3 CMS versions 14.0.0 through 14.3.3

Description Backend users can move records to a different page even if they lack the necessary edit permissions on the source page.

Recommendations Update TYPO3 CMS versions 13.0.0 through 13.4.31 to a version later than 13.4.31. Update TYPO3 CMS versions 14.0.0 through 14.3.3 to a version later than 14.3.3.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2026-47350

Affected Products

Typo3/Cms

References · 5

• https://github.com/TYPO3/typo3/commit/195356996a60e40aeb2cd3e45a5f5c8940d5e116 · Patch
• https://github.com/TYPO3/typo3/commit/c9898d2e67608eda78f8bd1f06ee9cf05a872a56 · Patch
• https://typo3.org/security/advisory/typo3-core-sa-2026-012 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-47350 · Security Note
• https://twitter.com/CVEnew/status/2064342505752043663 · Twitter Post