https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-21T17:08:58.346819+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-112069 CVE-2026-112069 — Broken Access Control in extension "FAL Protect" (fal_protect) 2026-10-21T17:08:58.347932+00:00

Affected: TYPO3 Extension "FAL Protect"

The extension no longer applied its access protection to files in file storages that use a non-default relative base path. These files were served directly by the web server, without any authentication or permission check. The issue is only exploitable when the extension is used on a website running TYPO3 14.3.