VULNERABILITY INTELLIGENCE

CVE-2026-65539

CVSS score7.1 HIGH

EPSS probability0.17%

CISA KEVNot currently listed

Published2026-07-23

Last modified2026-10-24

Description

Changing backend users' passwords via the user settings module results in storing the cleartext password in the uc and user_settings fields of the be_users database table. This issue affects TYPO3 CMS version 14.2.0.