CVE-2026-112064 Details
Description
The backend module for reviewing the consent history accepted sorting, grouping and index options from the request and used them in a database query without validation. Only the filter conditions of that query were bound as parameters. A backend user with access to the history or statistics functions could use this to read arbitrary data from the database, including password hashes of backend and frontend users.
A SQL injection vulnerability has been identified in the TYPO3 extension 'sgalinski Cookie Consent' (sg_cookie_optin), affecting versions 7.4.5 and below, as well as 8.0.0 to 8.1.11. The vulnerability arises because the backend module for reviewing consent history accepted sorting, grouping, and index options from requests and used them in database queries without proper validation. Only the filter conditions were parameterized, allowing backend users with access to history or statistics functions to read arbitrary data from the database, including password hashes of backend and frontend users.
Users are advised to update to version 7.4.6 or 8.1.12, available from the TYPO3 extension manager, Packagist, or the TYPO3 Extensions Repository.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 20, 2026CISA-ADP
Assessed Oct 20, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://typo3.org/security/advisory/typo3-ext-sa-2026-029 | TYPO3 | AdvisoryBundleRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | TYPO3 |
Affected Products
| Product | Versions |
|---|---|
| sgalinski Cookie Consent | <= 7.4.5 (semver) >= 8.0.0, <= 8.1.11 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 20, 2026 | CVE Modified | CISA-ADP |
| Oct 20, 2026 | New CVE Received | TYPO3 |