This Month in TYPO3: March, 2026

• TYPO3 13.4.27 and 12.4.44 maintenance releases published — routine maintenance keeping both active LTS branches stable. Schedule your update as part of regular operations.
• Authentication Bypass in E-Mail MFA Provider (mfa_email) — a security advisory disclosing an authentication bypass vulnerability. Users of the extension are advised to update the extension as soon as possible.
• Broken Access Control in Redirect Tab (redirect_tab) — access control flaw identified and disclosed. Patch promptly if you're running this extension.
• Insecure Deserialization in Mailqueue (mailqueue) — a deserialization vulnerability disclosed. Review your setup and update without delay.

As March has given way to April it’s time to reflect on what the past month has brought us. Recapping the evaluation of our most recent contributions to the TYPO3 core, we find some remarkable numbers. You guys are truly amazing! Check out the contribution numbers for March

• TYPO3 v14.2 — Refined Where It Matters — shipped 31 March, the final sprint release before v14 LTS. New features and optimizations across the entire system, with the full LTS milestone now just weeks out.
• 2026 Association election results are in — over 380 members voted, an 18% increase from 2025. A second round will determine the remaining board seat.
• ELTS for TYPO3 v12 presale opens 1 April 2026 — free support for v12 LTS ends 30 April 2026. Extended Long-Term Support provides continued security fixes and bug patches beyond that date.
• Join the TYPO3 v14 LTS launch celebrations — official release day is 21 April 2026, with community release parties forming across the ecosystem. Mark the date.
• Marketing Sprint in Berlin, 13–14 April — a hybrid sprint shaping the official v14 LTS narrative. Open to contributors who want to help tell the story.
• TYPO3 returned to CloudFest 2026 — the team represented TYPO3 in Rust, collaborating with FAIR and the Open Website Alliance on Cyber Resilience Act preparedness.
• Second community budget call for 2026 is live — the Association launched its second round of funded proposals, focusing on community- and team-driven initiatives.
• New TYPO3 certification pricing effective March 2026 — transparent costs, bundled mock exams, and two-year planning security for teams investing in certification.

• 11–18 April 2026 — TYPO3 Surfcamp 2026, Las Palmas, Spain
• 13–14 April 2026 — TYPO3 Marketing Sprint H1 2026, Berlin, Germany
• 21 April 2026 — TYPO3 v14 Release Party, Leipzig, Leipzig, Germany
• 22 April 2026 — TYPO3 Association General Assembly, Düsseldorf, Germany
• 23–25 April 2026 — TYPO3 Camp Schweiz, Zürich, Switzerland
• 7 May 2026 — TYPO3 Certification Day, Düsseldorf, Germany
• 8–10 May 2026 — TYPO3 Camp Baden-Württemberg, Heidelberg, Germany
• 12–13 May 2026 — Meet TYPO3 at CMS Summit 26, Frankfurt am Main, Germany
• 18–20 May 2026 — Meet TYPO3 at Open Source Summit North America, Minneapolis, MN, USA
• 19 May 2026 — TYPO3 Summit North America, Atlanta, GA, USA

• Visual editing in TYPO3 v14 changes the playing field — developer Matthias Vogel demonstrated live inline editing via the Camino theme at Web Camp Venlo. A genuine usability leap and a compelling pitch to prospective clients.
• Backend accessibility: v6 to v14, the honest audit — the accessibility team documents real progress and real gaps. A transparent, credibility-building look at how far TYPO3 has come and what work remains.
• Step-by-step guide to upgrading an outdated TYPO3 version — a practical walkthrough for agencies managing legacy installations. Well-timed as v12 ELTS approaches.
• First-timer at a Best Practices Remote Code Sprint — a first-hand account of joining the Best Practices Team sprint for the first time. Honest, human, and worth sharing with anyone on the fence about contributing.
• From billable hours to scalable products — a candid look at how TYPO3 agencies can break the capacity ceiling by building recurring-revenue products rather than trading time for money.
• Rosenheim code sprint: getting v14 over the finish line — Marno's account of a focused sprint week in Germany, where teams knocked out outstanding v14 tasks through sheer collaborative effort.

With elections wrapping up and the General Assembly just weeks away, now is a good moment to join. The roughly 1,100 members elect the board and contribute into core development and community projects. Community membership starts at €10/year — a voting stake in the future of a platform you build on every day. Become a member today

Shipped a v14 migration, mentored a first-time contributor, or built something worth talking about? The community wants to see it. Tell us what you've been working on — this series exists to surface real work from real people.

Genuine thanks this March to the developers who pushed v14 across the finish line in Rosenheim, the accessibility team for their honest and rigorous audit, the voters who turned out 18% stronger than last year, and every reviewer and bug fixer keeping the core healthy through the sprint season. The pre-LTS stretch shows what this community is made of.