Vulnerabilities

TI-2026-34349 CVE-2026-46724 · GHSA-c72x-mc2p-wv7x

Path Traversal in extension "Faceted Search" (ke_search)

LOW 27

The file indexer does not normalize the configured directory path.

CVSS 4.0MEDIUM 5.9 Network High privileges No interaction EPSS 0.00404 Published 2026-05-19 Fixed in 7.0.1, 6.6.1 +2 CWE-22

TI-2026-34348 CVE-2026-46723 · GHSA-67j3-jmm3-32xc

LOW 26

The additional_tables configuration of the page and tt_content indexers accepts arbitrary table and field names.

CVSS 4.0MEDIUM 5.9 Network High privileges No interaction EPSS 0.00318 Published 2026-05-19 Fixed in 7.0.1, 6.6.1 +2 CWE-668

TI-2026-34347 CVE-2026-46722 · GHSA-fq39-62gx-8hqx

LOW 26

The OOXML parsing of the file indexer does not disable external entity resolution.

CVSS 4.0MEDIUM 5.9 Network High privileges No interaction EPSS 0.00302 Published 2026-05-19 Fixed in 7.0.1, 6.6.1 +2 CWE-611