https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T02:38:04.102199+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-77128 CVE-2026-77128 — Broken Access Control in extension "Event management and registration" (sf_event_mgt) 2026-10-07T02:38:04.104080+00:00

Affected: TYPO3 Extension "Event management and registration"

The extension fails to enforce enable-field restrictions on a repository query parameter. An unauthenticated remote user can pass a demand-override parameter to view hidden or time-restricted events, unless the disableOverrideDemand plugin setting is active. Exploitation of this issue requires only that disableOverrideDemand is not enabled.