CVE-2026-112070Medium· 5.3▾ SunlitThe AJAX routes of the extension do not check whether a backend user has access to the related module or dashboard widget. Any backend user can therefore retrieve analytics data of the sites they have page access to.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 29.2 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
The AJAX routes of the extension do not check whether a backend user has access to the related module or dashboard widget. Any backend user can therefore retrieve analytics data of the sites they have page access to.
t3g/analytics < 1.1.1Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-112068Medium· 5.3Insecure Direct Object Reference in extension "Analytics" (analytics)
CVE-2026-112069Medium· 6.3Broken Access Control in extension "FAL Protect" (fal_protect)
CVE-2026-113468Medium· 6.9Broken Access Control in extension "TYPO3 Shop by coding.ms" (shop)
CVE-2026-112239High· 7.2Broken Access Control in extension "TYPO3 AI Integration Extension" (ns_t3ai)
CVE-2026-112071Medium· 6.9Broken Access Control in extension "TYPO3 Shop by coding.ms" (shop)
CVE-2026-112066High· 7.1Missing Authorization in extension "sgalinski Cookie Consent" (sg_cookie_optin)