https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T12:07:49.735043+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-248104 EUVD-2026-248104 2026-10-02T12:07:49.770786+00:00 EUVD-2026-248104 https://cve.radiocsirt.org/vuln/fkie_cve-2025-7899 fkie_cve-2025-7899 2026-10-02T12:07:49.770818+00:00

The powermail extension for TYPO3 allows Insecure Direct Object Reference resulting in download of arbitrary files from the webserver. This issue affects powermail version 12.0.0 up to 12.5.2 and version 13.0.0

 https://cve.radiocsirt.org/vuln/ghsa-x769-3cwv-f8hc GHSA-x769-3cwv-f8hc — Powermail extension for TYPO3 allows Insecure Direct Object Reference 2026-10-02T12:07:49.770849+00:00

Affected: Packagist: in2code/powermail

The powermail extension for TYPO3 allows Insecure Direct Object Reference resulting in download of arbitrary files from the webserver. This issue affects powermail version 12.0.0 up to 12.5.2 and version 13.0.0.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1621 WID-SEC-W-2025-1621 — TYPO3 Extensions: Mehrere Schwachstellen 2026-10-02T12:07:49.770874+00:00

Ein Angreifer kann mehrere Schwachstellen in verschiedenen TYPO3 Extensions ausnutzen, um Informationen offenzulegen, und um Dateien zu manipulieren.