TYPO3 厂商相关 174 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。
TYPO3 是一款基于 PHP 的开源内容管理系统，广泛用于构建企业级网站与数字平台。其历史漏洞多涉及远程代码执行、跨站脚本及越权访问，部分源于插件扩展或配置不当。尽管核心框架持续强化输入验证与权限控制，但第三方扩展的安全审计仍是关键风险点。截至最新统计，该生态已收录 118 条 CVE，提示用户需定期更新并严格审查集成组件，以维持系统整体安全性。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2023-50459 | TYPO3 femanager 授权问题漏洞 — femanager CWE-863 | 5.4 | Medium | 2026-09-14 |
| CVE-2023-50462 | TYPO3 content_consent 授权问题漏洞 — content_consent CWE-863 | 5.3 | Medium | 2026-09-14 |
| CVE-2023-50461 | TYPO3 direct_mail 授权问题漏洞 — direct_mail CWE-863 | 8.8 | High | 2026-09-14 |
| CVE-2023-50460 | TYPO3 femanager 授权问题漏洞 — femanager CWE-863 | 5.4 | Medium | 2026-09-14 |
| CVE-2023-45023 | TYPO3 femanager 授权问题漏洞 — femanager CWE-863 | 4.2 | Medium | 2026-09-14 |
| CVE-2026-77132 | TYPO3 CMS 信息泄露漏洞 — TYPO3 CMS CWE-862 | 5.3 | Medium | 2026-09-08 |
| CVE-2026-85400 | TYPO3 CMS 权限许可和访问控制问题漏洞 — TYPO3 CMS CWE-862 | 7.5 | High | 2026-09-08 |
| CVE-2026-56092 | TYPO3 Apache Solr for TYPO3 - Enterprise Search 授权问题漏洞 — Extension "Apache Solr for TYPO3 - Enterprise Search" CWE-862 | 7.6 | High | 2026-08-25 |
| CVE-2026-56093 | TYPO3 Apache Solr for TYPO3 - Enterprise Search 授权问题漏洞 — Extension "Apache Solr for TYPO3 - Enterprise Search" CWE-639 | 6.3 | Medium | 2026-08-25 |
| CVE-2026-56094 | TYPO3 Extension "Apache Solr for TYPO3 - Enterprise Search 输入验证错误漏洞 — Extension "Apache Solr for TYPO3 - Enterprise Search" CWE-943 | 6.3 | Medium | 2026-08-25 |
| CVE-2026-56095 | TYPO3 Apache Solr for TYPO3 - Enterprise Search 反序列化注入漏洞 — Extension "Apache Solr for TYPO3 - Enterprise Search" CWE-502 | 7.7 | High | 2026-08-25 |
| CVE-2026-56096 | TYPO3 Apache Solr for TYPO3 - Enterprise Search 输入验证错误漏洞 — Extension "Apache Solr for TYPO3 - Enterprise Search" CWE-943 | 6.3 | Medium | 2026-08-25 |
| CVE-2026-77127 | TYPO3 Modules 授权问题漏洞 — Extension "Modules" CWE-639 | 6.0 | Medium | 2026-08-25 |
| CVE-2026-77128 | TYPO3 Event management and registration 授权问题漏洞 — Extension "Event management and registration" CWE-862 | 6.3 | Medium | 2026-08-25 |
| CVE-2026-77129 | TYPO3 Event management and registration 代码注入漏洞 — Extension "Event management and registration" CWE-1336 | 7.7 | High | 2026-08-25 |
| CVE-2026-77131 | TYPO3 SYSSY - TYPO3 Monitoring & Security Checks 加密问题漏洞 — Extension "SYSSY - TYPO3 Monitoring & Security Checks" CWE-319 | 5.3 | Medium | 2026-08-25 |
| CVE-2026-77130 | TYPO3 SYSSY - TYPO3 Monitoring & Security Checks 会话机制问题漏洞 — Extension "SYSSY - TYPO3 Monitoring & Security Checks" CWE-613 | 5.3 | Medium | 2026-08-25 |
| CVE-2026-77133 | TYPO3 femanager 授权问题漏洞 — Extension "femanager" CWE-862 | 6.0 | Medium | 2026-08-25 |
| CVE-2026-77134 | TYPO3 femanager 授权问题漏洞 — Extension "femanager" CWE-863 | 8.3 | High | 2026-08-25 |
| CVE-2026-77136 | TYPO3 powermail 代码注入漏洞 — Extension "powermail" CWE-1336 | 9.5 | Critical | 2026-08-25 |
| CVE-2026-77135 | TYPO3 femanager 授权问题漏洞 — Extension "femanager" CWE-639 | 8.2 | High | 2026-08-25 |
| CVE-2026-77137 | TYPO3 Forms Export SQL注入漏洞 — Extension "Forms Export" CWE-89 | 7.7 | High | 2026-08-25 |
| CVE-2026-77138 | TYPO3 HTML5 Video Player vs. Powermail 反序列化注入漏洞 — Extension "HTML5 Video Player vs. Powermail" CWE-502 | 9.3 | Critical | 2026-08-25 |
| CVE-2026-77139 | TYPO3 Mask 路径遍历漏洞 — Extension "Mask" CWE-22 | 6.0 | Medium | 2026-08-25 |
| CVE-2026-77140 | TYPO3 Telephone Directory 授权问题漏洞 — Extension "Telephone Directory" CWE-862 | 8.7 | High | 2026-08-25 |
| CVE-2026-77141 | TYPO3 Club Directory 授权问题漏洞 — Extension "Club Directory" CWE-862 | 8.8 | High | 2026-08-25 |
| CVE-2026-77142 | TYPO3 Industry Directory 授权问题漏洞 — Extension "Industry Directory" CWE-862 | 8.8 | High | 2026-08-25 |
| CVE-2026-77143 | TYPO3 Forum 授权问题漏洞 — Extension "Forum" CWE-862 | 8.8 | High | 2026-08-25 |
| CVE-2026-77145 | TYPO3 Events 2 授权问题漏洞 — Extension "Events 2" CWE-639 | 7.1 | High | 2026-08-25 |
| CVE-2026-77144 | TYPO3 Events 2 输入验证错误漏洞 — Extension "Events 2" CWE-915 | 7.1 | High | 2026-08-25 |
本页汇总了 TYPO3 厂商截至目前公开的全部 174 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。