CVE-2026-8726— SQL Injection in extension "News system" (news)
Possible ATT&CK Techniques 1AI
T1190 · Exploit Public-Facing ApplicationGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-8726
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
SQL Injection in extension "News system" (news)
Source: NVD (National Vulnerability Database)
Vulnerability Description
The extension fails to properly sanitize user input before using it in a database query. As a result, an unauthenticated attacker can inject arbitrary SQL through a URL parameter on pages using the "Date Menu of news articles" plugin. Exploitation requires the "Date Menu of news articles" plugin to be in use and the TypoScript/Plugin setting disableOverrideDemand not to be enabled.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Source: NVD (National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| TYPO3 | Extension "News system" | 14.0.0 ~ 14.0.3 | - |
II. Public POCs for CVE-2026-8726
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-8726
请登录查看更多情报信息。
- https://typo3.org/security/advisory/typo3-ext-sa-2026-010vendor-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-8726
Same Patch Batch · TYPO3 · 2026-05-19 · 8 CVEs total
| CVE-2026-46722 | XML External Entity Injection in extension "Faceted Search" (ke_search) | |
| CVE-2026-46725 | Remote Code Execution in extension "Content Element Selector" (ceselector) | |
| CVE-2026-46721 | Broken Access Control in extension "Frontend User Registration" (sf_register) | |
| CVE-2026-46723 | Information Disclosure in extension "Faceted Search" (ke_search) | |
| CVE-2026-46724 | Path Traversal in extension "Faceted Search" (ke_search) | |
| CVE-2026-8727 | Remote Code Execution in extension "Site Crawler" (crawler) | |
| CVE-2026-8827 | SQL Injection in extension "Address List" (tt_address) |
IV. Related Vulnerabilities
Same vendor: TYPO3
- CVE-2026-46725
Remote Code Execution in extension "Content Element Selector - CVE-2026-8827
SQL Injection in extension "Address List" (tt_address) - CVE-2026-46724
Path Traversal in extension "Faceted Search" (ke_search) - CVE-2026-46723
Information Disclosure in extension "Faceted Search" (ke_sea - CVE-2026-46722
XML External Entity Injection in extension "Faceted Search"
Same weakness: CWE-89
- CVE-2026-8912
Contest Gallery <= 28.1.6 - Unauthenticated SQL Injection - CVE-2026-8827
SQL Injection in extension "Address List" (tt_address) - CVE-2026-8851
SOGo < 5.12.8 SQL Injection via addUserInAcls endpoint - CVE-2026-8785
projectworlds hospital-management-system-in-php GET Paramete - CVE-2026-8772
linlinjava litemall Admin Endpoint sql injection
V. Comments for CVE-2026-8726
No comments yet