--- title: Double bug bounties for vulnerabilities in TYPO3 CMS until the end of 2024 url: "https://news.typo3.com/article/double-bug-bounties-2024" description: The TYPO3 Security Team is doubling bug bounties for all verified vulnerabilities in TYPO3 CMS until December 31, 2024. This special campaign offers an opportunity for security researchers and ethical hackers to contribute to TYPO3’s security with enhanced rewards in recognition of their efforts. image: "https://news.typo3.com/_assets/d1e01514e4c4a5b3147940fa2ec50682/Images/og-image-news.jpg" date: 2026-06-11 modified: 2026-06-11 categories: - "Showcase & Success" - "Product Updates & Roadmap" --- # Double bug bounties for vulnerabilities in TYPO3 CMS until the end of 2024 - [Showcase & Success](https://news.typo3.com/article/category/showcase-success) - [Product Updates & Roadmap](https://news.typo3.com/article/category/product-updates-roadmap) Double bug bounties for vulnerabilities in TYPO3 CMS until the end of 2024 ========================================================================== 14 November 2024 ![](https://news.typo3.com/fileadmin/_processed_/b/c/csm_SecurityLocks_bbfb211390.webp) The TYPO3 Security Team is doubling bug bounties for all verified vulnerabilities in TYPO3 CMS until December 31, 2024. This special campaign offers an opportunity for security researchers and ethical hackers to contribute to TYPO3’s security with enhanced rewards in recognition of their efforts. - ![](https://news.typo3.com/typo3temp/assets/t3g/blog/gravatar/e4eaa13e33dd086a9c06f2570cb34609.jpeg)[Torben Hansen](https://news.typo3.com/article/author/torben-hansen) - ![](https://news.typo3.com/typo3temp/assets/t3g/blog/gravatar/b8266fdc667b773926c59081862ab148.jpeg)[Oliver Hader](https://news.typo3.com/article/author/oliver-hader) Cybersecurity Awareness Month is an annual event held every October to raise awareness about the importance of cybersecurity. It was first declared in 2004 in response to the growing need for awareness of cybersecurity risks as digital technology became increasingly integrated into everyday life. The TYPO3 Security Team is dedicated to maintaining a secure and reliable content management system for our community. We recognize the important role that security researchers play in helping us identify vulnerabilities in TYPO3 CMS before they can be exploited. Therefore, we actively invite security researchers, ethical hackers, and developers to engage with us in making TYPO3 CMS safer for everyone. To further emphasize our commitment to security and to build on the awareness Cybersecurity Month generated, we are excited to announce a Holidays 2024 themed campaign in which we will double all bug bounties for issues reported affecting TYPO3 CMS. **The campaign runs until the end of the holiday season, on 31 December 2024**. This is our way of saying thank you to the security community for their continued support and dedication to making the internet a safer place. ### The updated rewards for issues in TYPO3 CMS are as following: - **Critical (CVSS ≥ 9.0):** Up to 1,200 EUR - **High (CVSS ≥ 7.0):** Up to 600 EUR - **Medium (CVSS ≥ 4.0):** Up to 300 EUR - **Low (CVSS < 4.0):** Up to 100 EUR To qualify for these rewards, reported issues must align with the qualifying criteria outlined on our [bug bounty program page](https://news.typo3.com/article/typo3con-a-tech-conference-made-for-business-decision-makers) and must be confirmed by the TYPO3 Security Team **until 31 December 2024**. Please note that the increased bounties apply exclusively to **vulnerabilities found in TYPO3 CMS** itself. They do **not extend to 3rd party extensions or infrastructure-related** issues. ![](https://news.typo3.com/typo3temp/assets/t3g/blog/gravatar/7cf52722a5b7183b29d378a2284bd103.jpeg) About the Author [Torben Hansen](https://news.typo3.com/article/author/torben-hansen) Open Source Enthusiast & TYPO3 Expert I’m a passionate open-source advocate and dedicated TYPO3 expert. As a freelancer, I offer professional TYPO3 services to clients while actively contributing to the TYPO3 ecosystem. I have developed several public TYPO3 extensions and serve as the Co-Lead of the TYPO3 Security Team, helping to enhance the platform’s security and functionality. For many years, I have been blogging about TYPO3, sharing insights and expertise with the community. [More posts by this author](https://news.typo3.com/article/author/torben-hansen) ![](https://news.typo3.com/typo3temp/assets/t3g/blog/gravatar/cc7cba9757f98fbe05023a139119df74.jpeg) About the Author [Oliver Hader](https://news.typo3.com/article/author/oliver-hader) Core Developer at TYPO3 GmbH,Hof, Germany [Website](https://typo3.com)[Twitter](https://twitter.com/ohader)[LinkedIn](https://www.linkedin.com/in/oliverhader/)[Xing](https://www.xing.com/profile/Oliver_Hader) Oliver started to work with TYPO3 in 2005 and was fascinated by the product and its universe. Since 2007 he is member of the TYPO3 Core Team. After going back to university in 2014 for achieving a postgraduate master degree in internet web science, he is now researching on advanced web technology topics in general and for TYPO3 in particular. In his spare time, Oliver loves to go cycling cross-country in the uplands around Hof (Germany) in northern Bavaria - at the region where he's living as well. [More posts by this author](https://news.typo3.com/article/author/oliver-hader)