VULNERABILITY INTELLIGENCE
CVE-2026-77131
EPSS probability0.24%
CISA KEVNot currently listed
Published2026-08-25
Last modified2026-08-26
Description
When OpenSSL is unavailable on the server, the extension transmits TYPO3 system information in cleartext instead of encrypting it. Exploitation requires the attacker to already be in control of the SYSSY project's API key.
Weakness classification
- f4fb688c-4412-4426-b4b8-421ecf27b14a: CWE-319