Vendor
TYPO3
- CVEs tracked · all time
- 3
- in CISA KEV · all time
- 0
- articles · since 11 Sep
- 0
- articles · all time
- 2
No articles in the last 45 daysThe latest: SecurityOnline, Tue 25 Aug, 13:30 UTC.See the full timeline
Products: Extension "Content Element Selector", Extension "HTML5 Video Player vs. Powermail", Extension "powermail"
CVEs
3 CVEsCVE-2026-77136Server-Side Template Injection in extension "powermail" (powermail)CVSS9.5Critical–Not in KEV1.0%EPSS1article
CVE-2026-77138Remote Code Execution in extension "HTML5 Video Player vs. Powermail" (html5videoplayer_powermail)CVSS9.3Critical–Not in KEV0.7%EPSS1article
CVE-2026-46725Remote Code Execution in extension "Content Element Selector" (ceselector)CVSS9.2Critical–Not in KEV2.6%EPSS1article
- Critical RCE flaw in TYPO3 Powermail lets attackers hijack sitesSecurityOnline
- Critical TYPO3 Extension Exploit: Content Element Selector Flaw (CVE-2026-46725) Triggers Unauthenticated RCESecurityOnline · first in our coverage