Ghostwire

CVE-2026-47349: Backend users with access to the Recycler module were able to restore soft-deleted records on pages or for tables they...

MEDIUM CVSS 5.5

Published: June 9, 2026 | Last Modified: June 9, 2026

Description

Backend users with access to the Recycler module were able to restore soft-deleted records on pages or for tables they were not authorized to modify. This issue affects TYPO3 CMS versions before 10.4.57, 11.0.0-11.5.51, 12.0.0-12.4.46, 13.0.0-13.4.31 and 14.0.0-14.3.3.

Ghostwire Analysis — What This Means Practically

Medium CVSS score indicates moderate risk — exploitation requires specific conditions or results in limited impact.

This analysis is generated by Ghostwire from NVD, CISA KEV, EPSS, and open-source intelligence data. Verify findings through primary sources before acting.

Security Coverage (1 articles)

References

www.tenable.com/cve/CVE-2026-47349
www.cnnvd.org.cn/home/globalSearch?keyword=CVE-2026-47349