CVE-2026-11607 | TYPO3 CMS up to 14.3.2 form.yaml authorization

June 9, 2026 Yanac

A vulnerability identified as critical has been detected in TYPO3 CMS up to 10.4.56/11.5.50/12.4.45/13.4.30/14.3.2. The impacted element is an unknown function of the file form.yaml. The manipulation leads to missing authorization.

This vulnerability is uniquely identified as CVE-2026-11607. The attack is possible to be carried out remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More