CVE-2026-85400— TYPO3 CMS - Missing Authorization in lowlevel commands
Quick assessment
Affected
TYPO3 TYPO3 CMS
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
具备后端管理员权限但不具备系统维护者（system maintainer）权限的用户，能够执行 、 和 这三个命令中的任意一个。这使得他们能够修改本应仅限于系统维护者才能操作的任意系统配置。由此可能导致，例如，获取系统维护者权限或引发服务拒绝（DoS）。利用此漏洞需要一个具有管理员级别的后端用户账户。该问题影响 TYPO3 CMS 14.2.0 至 14.3.6 版本。
Possible ATT&CK Techniques 1 AI
T1098 · Account Manipulation
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-85400
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
TYPO3 CMS - Missing Authorization in lowlevel commands
Source: CVE Program / CVE List V5
Vulnerability Description
Backend administrators without system maintainer privileges were able to schedule any of the configuration:read, configuration:set, and configuration:show commands. This allowed them to modify arbitrary system configuration, which is normally limited to system maintainers. As a consequence, this allowed them, for example, to gain system maintainer privileges or cause a denial of service. Exploiting this vulnerability requires an administrator-level backend user account. This issue affects TYPO3 CMS versions 14.2.0-14.3.6.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
授权机制缺失
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-85400
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-85400
请登录查看更多情报信息。
Other References for CVE-2026-85400 (3)
IV. Related Vulnerabilities
Same product: TYPO3 CMS
-
CVE-2026-77132
TYPO3 CMS - Information Disclosure via Backend Localization -
CVE-2026-19418
TYPO3 CMS - Broken Access Control in Backend and Install Too -
CVE-2026-15305
TYPO3 CMS - Unrestricted File Upload in Form Framework -
CVE-2026-49742
TYPO3 CMS - Broken Access Control in Media Module -
CVE-2026-49741
TYPO3 CMS - Privilege Escalation & SQL Injection in Form Fra
Same vendor: TYPO3
-
CVE-2026-77132
TYPO3 CMS - Information Disclosure via Backend Localization -
CVE-2026-56092
Broken Access Control in extension "Apache Solr for TYPO3 - -
CVE-2026-56093
Broken Access Control in extension "Apache Solr for TYPO3 - -
CVE-2026-56094
Information Disclosure in extension "Apache Solr for TYPO3 - -
CVE-2026-56095
Insecure Deserialization in extension "Apache Solr for TYPO3
Same weakness: CWE-862
-
CVE-2026-9331
EDD Product Catalog Feed by PixelYourSite <= 1.0.2 - Authent -
CVE-2026-77132
TYPO3 CMS - Information Disclosure via Backend Localization -
CVE-2026-81781
WordPress Unbounce Landing Pages plugin <= 1.1.4 - Broken Ac -
CVE-2026-81790
WordPress Csomagpontok és szállítási címkék WooCommerce-hez -
CVE-2026-76963
Missing Authorization Check in Application Server ABAP of SA
V. Comments for CVE-2026-85400
No comments yet