Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-6553
7.5
HIGHCVSS v3
Published
April 21, 2026
Affected
1 project
Assigned by
f4fb688c-4412-4426-b4b8-421ecf27b14a
Severity scale
010
Description
Changing backend users' passwords via the user settings module results in storing the cleartext password in the uc and user_settings fields of the be_users database table. This issue affects TYPO3 CMS version 14.2.0.
TYPO3/typo3
GitHubThe TYPO3 Core - Enterprise Content Management System. Synchronized mirror of https://review.typo3.org/q/project:Packages/TYPO3.CMS
GitHubThe TYPO3 Core - Enterprise Content Management System. Synchronized mirror of https://review.typo3.org/q/project:Packages/TYPO3.CMS= 14.2.0NVD