PT-2026-41863

CVE-2026-46723

Published

2026-05-19

Updated

2026-05-19

Description by

CVSS 4.0

5.9

Medium

MetricsAV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions TYPO3 (affected versions not specified)

Description The additional tables configuration of the page and tt content indexers allows the use of arbitrary table and field names. A backend user with permissions to edit indexer configurations can exploit this to copy sensitive data from internal tables into the search index.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Researchers

Christian Bülter

Seungbin Yang

Vendors

Affected products

Weakness enumeration

CWE-668: Exposure of Resource to Wrong Sphere

Related identifiers