{"id":"CVE-2026-56095","aliases":[],"url":"https://o3.security/vulnerability/CVE-2026-56095","summary":"The extension's indexer passed every field value returned by content object rendering through PHP's unserialize() function when transferring multi-value data for the SOLR_CLASSIFICATION,…","details":"The extension's indexer passed every field value returned by content object rendering through PHP's unserialize() function when transferring multi-value data for the SOLR_CLASSIFICATION, SOLR_MULTIVALUE and SOLR_RELATION content object types, rather than a safe format. If user-generated content saved in the TYPO3 database can reach an indexed field, this exposes a PHP Object Injection surface.","published":"2026-08-25T09:17:31.457","modified":"2026-08-25T09:17:31.457","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":null,"affectedPackages":[],"fix":null,"references":[{"type":"WEB","url":"https://typo3.org/security/advisory/typo3-ext-sa-2026-025"}],"provenance":{"sources":["OSV.dev","NVD","FIRST.org (EPSS)"],"lastVerified":"2026-08-25T09:17:31.457"}}