typo3/cms-lowlevel vulnerabilities

CVEs whose affected-version data names the typo3/cms-lowlevel package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-85400High· 7.5

2w ago

Backend administrators without system maintainer privileges were able to schedule any of the configuration:read, configuration:set, and configuration:show commands

Backend administrators without system maintainer privileges were able to schedule any of the configuration:read, configuration:set, and configuration:show commands. This allowed them to modify arbitrary system configuration, which is nor…

▾ TwilightTYPO3 · typo3/cms-lowlevelEPSS 0.44%via NVD