Known Vulnerabilities for Flow by Typo3
Listed below are 1 of the newest known vulnerabilities associated with "Flow" by "Typo3".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-109506 json | Multiple TP-Link Wi-Fi range extenders use a custom, reversible XOR-and-dictionary transformation in the HTTP web-management ... | Not Provided | 2026-10-14 | 2026-10-14 |
| CVE-2026-109371 json | ZITADEL 3.0.0 before 4.18.0 contains a missing authentication vulnerability in the hosted Login V1 UI, where the change-usern... | Not Provided | 2026-10-12 | 2026-10-12 |
| CVE-2026-109307 json | Craft CMS 5.0.0 before 5.10.14 contains a DOM-based cross-site scripting vulnerability in the control panel login and 2FA ver... | Not Provided | 2026-10-12 | 2026-10-12 |
| CVE-2026-109245 json | FreeRDP 3.0.0 before 3.32.0 contains an improper certificate validation vulnerability in freerdp_http_request() in libfreerdp... | Not Provided | 2026-10-12 | 2026-10-13 |
| CVE-2026-109082 json | A flaw was found in the Client-Initiated Backchannel Authentication CIBA implementation within the keycloak-services componen... | Not Provided | 2026-10-12 | 2026-10-12 |
| CVE-2026-108702 json | 1Panel-dev CordysCRM through 1.9.3 lacks a PROCESS_SETTING permission check on POST /approval-flow/webhook/test, allowing any... | Not Provided | 2026-10-11 | 2026-10-11 |
| CVE-2026-108550 json | SkillHub before 0.2.22 contains an incorrect authorization vulnerability in AccountMergeService and AccountMergeController th... | Not Provided | 2026-10-10 | 2026-10-14 |
| CVE-2026-108109 json | PHPNuxBill through 2025.3.20 contains an account takeover vulnerability in the customer password reset flow in system/control... | Not Provided | 2026-10-09 | 2026-10-09 |
| CVE-2026-108071 json | Incorrect authentication vulnerability in the TSplus Remote Access multi-factor authentication (MFA) mechanism. A remote atta... | Not Provided | 2026-10-14 | 2026-10-14 |
| CVE-2026-107839 json | ageLANServer provides a cross-platform web server and launcher for offline multiplayer in several Age of Empires and Age of M... | Not Provided | 2026-10-09 | 2026-10-14 |