Posts by date: 2026 / 8 en https://news.typo3.com/article/archive/2026/august/blog.archive.xml Tue, 25 Aug 2026 14:36:30 +0200 https://news.typo3.com/security/advisory/typo3-ext-sa-2026-027https://news.typo3.com/security/advisory/typo3-ext-sa-2026-027#commentsTue, 25 Aug 2026 10:14:00 +0200Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2026-027It has been discovered that the extension "Forms Export" (frp_form_answers) is vulnerable to SQL Injection. https://news.typo3.com/security/advisory/typo3-ext-sa-2026-026https://news.typo3.com/security/advisory/typo3-ext-sa-2026-026#commentsTue, 25 Aug 2026 10:13:00 +0200Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2026-026It has been discovered that the extension "Events 2" (events2) is susceptible to two instances of Broken Access Control. https://news.typo3.com/security/advisory/typo3-ext-sa-2026-025https://news.typo3.com/security/advisory/typo3-ext-sa-2026-025#commentsTue, 25 Aug 2026 10:12:00 +0200Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2026-025It has been discovered that the extension "Apache Solr for TYPO3 - Enterprise Search" (solr) is vulnerable to Broken Access Control, Insecure Deserialization and Information Disclosure. https://news.typo3.com/security/advisory/typo3-ext-sa-2026-024https://news.typo3.com/security/advisory/typo3-ext-sa-2026-024#commentsTue, 25 Aug 2026 10:11:00 +0200Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2026-024It has been discovered that the extension "femanager" (femanager) is vulnerable to Broken Access Control and Information Disclosure. https://news.typo3.com/security/advisory/typo3-ext-sa-2026-023https://news.typo3.com/security/advisory/typo3-ext-sa-2026-023#commentsTue, 25 Aug 2026 10:10:00 +0200Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2026-023It has been discovered that the extension "Event management and registration" (sf_event_mgt) is vulnerable to Broken Access Control and Server-Side Template Injection (SSTI). https://news.typo3.com/security/advisory/typo3-ext-sa-2026-022https://news.typo3.com/security/advisory/typo3-ext-sa-2026-022#commentsTue, 25 Aug 2026 10:09:00 +0200Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2026-022It has been discovered that the extension "powermail" (powermail) is vulnerable to Server-Side Template Injection (SSTI). https://news.typo3.com/security/advisory/typo3-ext-sa-2026-021https://news.typo3.com/security/advisory/typo3-ext-sa-2026-021#commentsTue, 25 Aug 2026 10:08:00 +0200Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2026-021It has been discovered that the extension "Forum" (pforum) is susceptible to Broken Access Control. https://news.typo3.com/security/advisory/typo3-ext-sa-2026-020https://news.typo3.com/security/advisory/typo3-ext-sa-2026-020#commentsTue, 25 Aug 2026 10:07:00 +0200Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2026-020It has been discovered that the extension "Industry Directory" (yellowpages2) is susceptible to Broken Access Control. https://news.typo3.com/security/advisory/typo3-ext-sa-2026-019https://news.typo3.com/security/advisory/typo3-ext-sa-2026-019#commentsTue, 25 Aug 2026 10:06:00 +0200Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2026-019It has been discovered that the extension "Club Directory" (clubdirectory) is susceptible to Broken Access Control. https://news.typo3.com/security/advisory/typo3-ext-sa-2026-018https://news.typo3.com/security/advisory/typo3-ext-sa-2026-018#commentsTue, 25 Aug 2026 10:05:00 +0200Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2026-018It has been discovered that the extension "Telephone Directory" (telephonedirectory) is susceptible to Broken Access Control. https://news.typo3.com/security/advisory/typo3-ext-sa-2026-017https://news.typo3.com/security/advisory/typo3-ext-sa-2026-017#commentsTue, 25 Aug 2026 10:04:00 +0200Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2026-017It has been discovered that the extension "Mask" (mask) is vulnerable to Path Traversal. https://news.typo3.com/security/advisory/typo3-ext-sa-2026-016https://news.typo3.com/security/advisory/typo3-ext-sa-2026-016#commentsTue, 25 Aug 2026 10:03:00 +0200Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2026-016It has been discovered that the extension "Modules" (modules) is vulnerable to Information Disclosure. https://news.typo3.com/security/advisory/typo3-ext-sa-2026-015https://news.typo3.com/security/advisory/typo3-ext-sa-2026-015#commentsTue, 25 Aug 2026 10:02:00 +0200Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2026-015It has been discovered that the extension "SYSSY - TYPO3 Monitoring & Security Checks" (syssy) is vulnerable to Insufficient Session Expiration and Cleartext Transmission of Sensitive Information. https://news.typo3.com/security/advisory/typo3-ext-sa-2026-014https://news.typo3.com/security/advisory/typo3-ext-sa-2026-014#commentsTue, 25 Aug 2026 10:01:00 +0200Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2026-014It has been discovered that the extension "HTML5 Video Player vs. Powermail" (html5videoplayer_powermail) is vulnerable to Remote Code Execution. https://news.typo3.com/article/how-to-choose-the-right-typo3-agency-for-your-projectTue, 25 Aug 2026 07:00:00 +0200Myrna Gönnemannhttps://news.typo3.com/article/how-to-choose-the-right-typo3-agency-for-your-projectAdopting TYPO3 as your CMS sets the foundation for enterprise security, scalability, and long-term stability. But the success of your project depends to a large extent on the partner you choose to implement it with. Here is a guide on how to evaluate potential agencies, identify key factors to consider, and use official resources to find the right fit for your organization. https://news.typo3.com/article/typo3-association-board-meeting-protocol-6-august-2026https://news.typo3.com/article/typo3-association-board-meeting-protocol-6-august-2026#commentsThu, 20 Aug 2026 13:17:30 +0200Martin Helmichhttps://news.typo3.com/article/typo3-association-board-meeting-protocol-6-august-2026Main topics were a review of a decision paper regarding conflict of interests, the proposal of a TYPO3 Enterprise Committee and the constitution of a working group for by-law changes decided by the recent General Assembly. https://news.typo3.com/article/content-blocks-q2/2026-report-and-the-gui-for-typo3-v14https://news.typo3.com/article/content-blocks-q2/2026-report-and-the-gui-for-typo3-v14#commentsWed, 19 Aug 2026 00:00:00 +0200André Kraushttps://news.typo3.com/article/content-blocks-q2/2026-report-and-the-gui-for-typo3-v14The Content Blocks GUI now runs on TYPO3 v13 and v14 from a single codebase, the JSON Schema received a round of improvements, and one of the team took part in the TYPO3 Dialogue Days in Düsseldorf, Germany. https://news.typo3.com/article/typo3-university-days-2026-universities-and-agencies-meet-in-erfurt-germanyhttps://news.typo3.com/article/typo3-university-days-2026-universities-and-agencies-meet-in-erfurt-germany#commentsMon, 17 Aug 2026 00:00:00 +0200Eric SchümannMartina Ahlswedehttps://news.typo3.com/article/typo3-university-days-2026-universities-and-agencies-meet-in-erfurt-germanyHave you heard of the TYPO3 University Days? TYPO3 enthusiasts from the university sector will be meeting up on 15-16 September, 2026 at the University of Erfurt. Sessions are held in German. https://news.typo3.com/article/typo3-association-board-meeting-protocol-22-july-2026https://news.typo3.com/article/typo3-association-board-meeting-protocol-22-july-2026#commentsFri, 14 Aug 2026 00:00:00 +0200Martin Helmichhttps://news.typo3.com/article/typo3-association-board-meeting-protocol-22-july-2026The board discussed a proposed Enterprise Committee, updates from the Governance Working Group and the compliance officer. Further topics were membership exclusions, trade mark violations and the optimization of internal processes. https://news.typo3.com/article/generative-engine-optimization-for-typo3-geo-guidehttps://news.typo3.com/article/generative-engine-optimization-for-typo3-geo-guide#commentsThu, 13 Aug 2026 10:17:00 +0200Christoph Kielhttps://news.typo3.com/article/generative-engine-optimization-for-typo3-geo-guideGenerative Engine Optimization for TYPO3 explained: Chunking, structured data, multilingual setup for citable AI answers. Our practical guide to GEO for content creators. https://news.typo3.com/article/the-future-of-typo3-adapting-for-digital-sovereignty-in-an-ever-changing-worldhttps://news.typo3.com/article/the-future-of-typo3-adapting-for-digital-sovereignty-in-an-ever-changing-world#commentsWed, 12 Aug 2026 00:00:00 +0200Jana Höffnerhttps://news.typo3.com/article/the-future-of-typo3-adapting-for-digital-sovereignty-in-an-ever-changing-worldTYPO3 is facing major changes across the IT sector and the web. In this opinion piece, TYPO3 Association Vice President Jana Höffner explains why the Association, the TYPO3 Company, and the community must embrace change as an opportunity to strengthen TYPO3’s future. https://news.typo3.com/article/typo3-1436-and-13434-security-releases-publishedhttps://news.typo3.com/article/typo3-1436-and-13434-security-releases-published#commentsTue, 11 Aug 2026 09:35:00 +0200Oliver Haderhttps://news.typo3.com/article/typo3-1436-and-13434-security-releases-publishedThe versions 14.3.6 and 13.4.34 of the TYPO3 Enterprise Content Management System have just been released. https://news.typo3.com/security/advisory/typo3-core-sa-2026-021https://news.typo3.com/security/advisory/typo3-core-sa-2026-021#commentsTue, 11 Aug 2026 09:30:00 +0200Oliver Haderhttps://news.typo3.com/security/advisory/typo3-core-sa-2026-021It has been discovered that TYPO3 CMS is susceptible to broken access control. https://news.typo3.com/article/new-community-support-contact-for-code-of-conduct-incidentshttps://news.typo3.com/article/new-community-support-contact-for-code-of-conduct-incidents#commentsMon, 10 Aug 2026 00:00:00 +0200Rachel Foucardhttps://news.typo3.com/article/new-community-support-contact-for-code-of-conduct-incidentsFrom 1 September 2026, TYPO3 community members can choose between the Ombudsperson Committee and a new independent service from Inmedio for confidential support with Code of Conduct incidents. Join the community Q&A on 26 August to learn more. https://news.typo3.com/article/review-the-proposed-rules-for-typo3-units-and-the-unit-cooperation-panelhttps://news.typo3.com/article/review-the-proposed-rules-for-typo3-units-and-the-unit-cooperation-panel#commentsThu, 06 Aug 2026 13:47:12 +0200Mathias Bolt Lesniakhttps://news.typo3.com/article/review-the-proposed-rules-for-typo3-units-and-the-unit-cooperation-panelProposed Rules for TYPO3 Units and a TYPO3 Unit Cooperation Panel are now available for community review. Questions and feedback are welcome. Read the proposals, consult the accompanying FAQs, and submit questions and feedback by 6 September 2026. https://news.typo3.com/article/visual-editor-community-budget-from-innovation-to-production-readyhttps://news.typo3.com/article/visual-editor-community-budget-from-innovation-to-production-ready#commentsThu, 06 Aug 2026 00:00:00 +0200Matthias Vogelhttps://news.typo3.com/article/visual-editor-community-budget-from-innovation-to-production-readyThe TYPO3 Community Budget project enhanced the Visual Editor extension's accessibility, reliability, and suitability for multilingual editorial work. With the funded work complete, Visual Editor is now production-ready while maintaining its path to TYPO3 Core. https://news.typo3.com/article/vote-now-budget-2026-ideas-for-round-three-have-been-publishedhttps://news.typo3.com/article/vote-now-budget-2026-ideas-for-round-three-have-been-published#commentsWed, 05 Aug 2026 00:00:00 +0200Ingo Schmitthttps://news.typo3.com/article/vote-now-budget-2026-ideas-for-round-three-have-been-publishedThe call for community budget ideas for the third round of 2026 was successful: Four community and two team ideas have made it to the poll. These ideas can now be discussed and TYPO3 Association members can cast their vote. https://news.typo3.com/article/typo3-wordpress-na-summithttps://news.typo3.com/article/typo3-wordpress-na-summit#commentsTue, 04 Aug 2026 07:14:00 +0200Kendall Littonhttps://news.typo3.com/article/typo3-wordpress-na-summitTYPO3 vs. WordPress isn't just a feature comparison. Our recap from the TYPO3 North American Summit explores why native multilingual support, workflows, permissions, and governance can reduce plugin complexity and improve long-term scalability. https://news.typo3.com/article/this-month-in-typo3-july-2026https://news.typo3.com/article/this-month-in-typo3-july-2026#commentsTue, 04 Aug 2026 00:00:00 +0200Jürgen Pietschmannhttps://news.typo3.com/article/this-month-in-typo3-july-2026July was governance month. The Association board redistributed its portfolios after the 2026 election, Jana Höffner stepped in as Vice President, and two days of Dialogue Days in Düsseldorf put shared priorities on the table in the open. https://news.typo3.com/article/typo3-contribution-in-numbers-july-2026https://news.typo3.com/article/typo3-contribution-in-numbers-july-2026#commentsSat, 01 Aug 2026 06:05:06 +0200Frank Näglerhttps://news.typo3.com/article/typo3-contribution-in-numbers-july-2026See the full recap of TYPO3's July core contributions with 61 contributors, 146 reviews, bug fixes, features, and a big thank-you to our developers.