TYPO3 Extension (Mail): Mehrere Schwachstellen
NEOSEC enrichment — no mirror of the original source
Ein Angreifer kann mehrere Schwachstellen in der TYPO3 Mail Extension ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um falsche Informationen darzustellen, um Daten zu manipulieren, um Informationen offenzulegen und um einen Cross-Site Scripting Angriff durchzuführen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Mediumbsi:WID-SEC-2026-43227 linked CVEs
Open advisory with all CVEs
More on Extension
Other advisories
- CriticalCVE-2026-114630ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: Pfadüberschreitung (Path Traversal)
- CriticalCVE-2026-114630ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System: Pfadüberschreitung (Path Traversal)
- MediumCVE-2026-115451Tassos.gr Advanced Custom Fields extension for Joomla: unzureichende Zugriffskontrolle
- HighCVE-2026-115452Tassos.gr Advanced Custom Fields extension for Joomla: Cross-Site-Scripting (XSS)
- HighCVE-2026-107903Balbooa.com Gridbox extension for Joomla: Cross-Site-Scripting (XSS)
- MediumCVE-2026-107130Balbooa.com Gridbox extension for Joomla: Umgehung der Autorisierung über nutzergesteuerten Schlüssel
- HighCVE-2026-107129Balbooa.com Gridbox extension for Joomla: Pfadüberschreitung (Path Traversal)
- HighCVE-2026-105607Balbooa.com Gridbox extension for Joomla: Cross-Site-Scripting (XSS)
Other news entries
- Malicious Browser Extensions Could Use Claude Dispatch to Run Code on Users' ComputersNewsThe Hacker News
- ⚡ Weekly Recap: Critical CVEs, Linux DDoS Botnet, Device-Code Phishing, Android Spyware and MoreNewsThe Hacker News
- Cursor removes malicious Claude Code extension after SSH backdoor attemptNewsCSO Online
- Malicious Claude Code Extension Served in Cursor Supply Chain AttackNewsSecurityWeek
- OneNote File Extraction, (Sun, Nov 1st)NewsSANS ISC Diary
- Inside a malicious Claude Code-branded extension and its persistent SSH backdoorNewsMicrosoft Threat Intelligence
- Anthropic VS code extension on Cursor backdoored for nearly 12 hoursNewsArs Technica — Security
- Devs Hit by Trojanized Claude Code Extension for CursorNewsDark Reading
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4322
ID