{"id":"CVE-2026-112068","published":"2026-10-20T10:17:04.010","lastModified":"2026-10-20T19:28:52.970","description":"The backend module does not check whether a backend user has access to the requested site. Users with access to the module can therefore open the analytics dashboard of any site.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-639"],"vendors":[],"products":[],"references":[{"url":"https://typo3.org/security/advisory/typo3-ext-sa-2026-031","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}