{"action":"Upgrade typo3/cms-backend to 13.4.34 or later.","affected":[{"fixed":"13.4.34","introduced":"13.0.0"}],"component":"typo3/cms-backend","cve_ids":["CVE-2026-19418"],"ecosystem":"Packagist","epss":0.00242,"exploited":false,"fixed_versions":["13.4.34"],"ghsa_id":"GHSA-68jx-f42c-7599","id":"tcs_01M5KEWVRC7GMPYSMF7BKB3K30","modified_at":"2026-09-01T21:55:52.105169Z","published_at":"2026-09-01T21:31:42Z","references":["https://osv.dev/vulnerability/GHSA-68jx-f42c-7599","https://github.com/TYPO3/typo3/security/advisories/GHSA-68jx-f42c-7599","https://nvd.nist.gov/vuln/detail/CVE-2026-19418","https://github.com/TYPO3/typo3/commit/4a75e862c589c85d795d7c65dcdc835f8f413efc","https://github.com/TYPO3/typo3/commit/a0e8ee06a40e959b9e7b06a4b1cb19d3a0d3dcf7","https://github.com/TYPO3/typo3/commit/ae0abd329d52285fe6e92804c3608820ad45e872","https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2026-19418.yaml","https://github.com/TYPO3/typo3","https://news.typo3.com/security/advisory/typo3-core-sa-2026-021","https://typo3.org/security/advisory/typo3-core-sa-2020-006","https://typo3.org/security/advisory/typo3-core-sa-2026-021"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-68jx-f42c-7599","url":"https://osv.dev/vulnerability/GHSA-68jx-f42c-7599"}],"summary":"TYPO3 CMS - Broken Access Control in Backend and Install Tool"}