CVE-2026-56092

Vulnerability Description

The extension forces empty frontend-group and subpage-inheritance restrictions onto page records during indexer sub-requests, and this forged state was persisted into the shared rootline cache, allowing anonymous visitors to bypass extendToSubpages-inherited access restrictions on cached pages.

Related Weaknesses (CWE)

CWE-862

References

https://typo3.org/security/advisory/typo3-ext-sa-2026-025

FAQ

What is CVE-2026-56092?

CVE-2026-56092 is a documented vulnerability. The extension forces empty frontend-group and subpage-inheritance restrictions onto page records during indexer sub-requests, and this forged state was persisted into the shared rootline cache, allowi...

How severe is CVE-2026-56092?

CVSS scoring is not yet available for CVE-2026-56092. Check NVD for updates.

Is there a patch for CVE-2026-56092?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.