CVE-2026-77132 | TYPO3 up to 14.3.6 Backend Localization Wizard improper authorization

September 8, 2026 Yanac

A vulnerability marked as problematic has been reported in TYPO3 up to 10.4.59/11.5.53/12.4.48/13.4.34/14.3.6. Impacted is an unknown function of the component Backend Localization Wizard. The manipulation leads to improper authorization.

This vulnerability is uniquely identified as CVE-2026-77132. The attack is possible to be carried out remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More