Veille CVE

Recherche « TYPO3 Extension "HTML5 Video Player vs. Powermail" »

1 CVE

Critique 1 Élevée 0 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « TYPO3 Extension "HTML5 Video Player vs. Powermail" » ✕
  1. CVE-2026-77138 9.3 Critique

    TYPO3 Extension "HTML5 Video Player vs. Powermail"

    The extension fails to safely process untrusted client input of an attacker-controlled cookie directly to PHP's unserialize(). A remote, unauthenticated attacker can supply a crafted serialized payload to trigger PHP Object Injection, leading to Remote Code Execution on the TYPO3 server.