https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T05:48:42.163263+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-160522 EUVD-2026-160522 2026-10-16T05:48:42.166020+00:00 EUVD-2026-160522 https://cve.radiocsirt.org/vuln/fkie_cve-2024-45233 fkie_cve-2024-45233 2026-10-16T05:48:42.166050+00:00

An issue was discovered in powermail extension through 12.3.5 for TYPO3. Several actions in the OutputController can directly be called, due to missing or insufficiently implemented access checks, resulting in Broken Access Control. Depending on the configuration of the Powermail Frontend plugins, an unauthenticated attacker can exploit this to edit, update, delete, or export data of persisted forms. This can only be exploited when the Powermail Frontend plugins are used. The fixed versions are 7.5.0, 8.5.0, 10.9.0, and 12.4.0.

 https://cve.radiocsirt.org/vuln/ghsa-9jqr-5x45-pgw8 GHSA-9jqr-5x45-pgw8 — Powermail TYPO3 extension Broken Access Control in the OutputController 2026-10-16T05:48:42.166081+00:00

Affected: Packagist: in2code/powermail

An issue was discovered in powermail extension through 12.3.5 for TYPO3. Several actions in the OutputController can directly be called, due to missing or insufficiently implemented access checks, resulting in Broken Access Control. Depending on the configuration of the Powermail Frontend plugins, an unauthenticated attacker can exploit this to edit, update, delete, or export data of persisted forms. This can only be exploited when the Powermail Frontend plugins are used. The fixed versions are 7.5.0, 8.5.0, 10.9.0, and 12.4.0.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1931 WID-SEC-W-2024-1931 — TYPO3 Powermail Extension: Mehrere Schwachstellen ermöglichen Manipulation von Dateien und die Offenlegung von Informat… 2026-10-16T05:48:42.166107+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in der TYPO3 Powermail Extension ausnutzen, um Dateien zu manipulieren und vertrauliche Informationen preiszugeben.