MEDIUM 5.3 NVD

CVE-2026-77131

When OpenSSL is unavailable on the server, the extension transmits TYPO3 system information in cleartext instead of encrypting it. Exploitation requires the att

When OpenSSL is unavailable on the server, the extension transmits TYPO3 system information in cleartext instead of encrypting it. Exploitation requires the attacker to already be in control of the SYSSY project's API key.

References

https://typo3.org/security/advisory/typo3-ext-sa-2026-015

Published: 2026-08-25 · Source: NVD · Feed updated: 2026-08-25

This medium severity vulnerability with a CVSS score of 5.3 was published on 2026-08-25 via NVD.

vulnfeed aggregates 12116 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.