Unverified Topic Editing in TYPO3 by the Vendor TYPO3

CVE-2026-77143

What is CVE-2026-77143?

The TYPO3 CMS experiences a vulnerability in the frontend topic editing process where ownership verification is not enforced on the server side. Consequently, a malicious visitor can access publicly listed topic identifiers and submit unauthorized modification requests, allowing them to overwrite existing content without any verification of ownership. This issue poses significant risks, as it requires no special access privileges or unique configuration settings, making it easily exploitable. It is essential for TYPO3 users to implement updates and security measures to safeguard their forums from potential exploitation.

References