CVE-2026-77131: medium-severity vulnerability in TYPO3 Extension "SYSSY - TYPO3 Monitoring &…
Cleartext Transmission of Sensitive Information in extension "SYSSY - TYPO3 Monitoring & Security Checks" (syssy)
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.3epss 0.2%
When OpenSSL is unavailable on the server, the extension transmits TYPO3 system information in cleartext instead of encrypting it. Exploitation requires the attacker to already be in control of the SYSSY project's API key.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
Affected products
TYPO3 · Extension "SYSSY - TYPO3 Monitoring & Security Checks"Related CVEs — TYPO3 Extension "SYSSY - TYPO3 Monitoring &…
In the same product, most dangerous first.