https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-22T10:14:19.903143+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-232229 EUVD-2026-232229 2026-10-22T10:14:19.907474+00:00 EUVD-2026-232229 https://cve.radiocsirt.org/vuln/fkie_cve-2022-47408 fkie_cve-2022-47408 2026-10-22T10:14:19.907507+00:00

An issue was discovered in the fp_newsletter (aka Newsletter subscriber management) extension before 1.1.1, 1.2.0, 2.x before 2.1.2, 2.2.1 through 2.4.0, and 3.x before 3.2.6 for TYPO3. There is a CAPTCHA bypass that can lead to subscribing many people.

 https://cve.radiocsirt.org/vuln/ghsa-f683-35w9-28g5 GHSA-f683-35w9-28g5 — Multiple vulnerabilities in extension "Newsletter subscriber management" (fp_newsletter) 2026-10-22T10:14:19.907537+00:00

Affected: Packagist: fixpunkt/fp-newsletter

The CAPTCHA of the extension can be bypassed which may result in automated creation of various newsletter subscribers. It is possible to provide arbitrary subscription UIDs to the `deleteAction` of the extension resulting in all newsletter subscribers to be unsubscribed. Insufficient access checks in the `createAction` and `unsubscribeAction` can be used to obtain data of existing newsletter subscribers.

 https://cve.radiocsirt.org/vuln/gsd-2022-47408 gsd-2022-47408 2026-10-22T10:14:19.907563+00:00 gsd-2022-47408