CVE-2026-6553
1 advisory.
Packagist/typo3/cms-backend CVE-2026-6553: high 7.5
TYPO3 CMS Stores Cleartext Password in User Settings Module
Action: Upgrade typo3/cms-backend to 14.3.0 or later.
composer require typo3/cms-backend:14.3.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 14.2.0 | 14.3.0 | - |
Fixed versions
| 14.3.0 |
Sources
- osv: GHSA-xvv6-p4wf-mvx7
- https://github.com/TYPO3/typo3/security/advisories/GHSA-xvv6-p4wf-mvx7
- https://nvd.nist.gov/vuln/detail/CVE-2026-6553
- https://github.com/TYPO3/typo3/commit/9a6e913f70767f63b322ae3e2d2f4e302624c291
- https://github.com/TYPO3/typo3
- https://typo3.org/security/advisory/typo3-core-sa-2026-005
CVE-2026-6553 · published · modified · JSON