CVE-2026-77130 — Insufficient Session Expiration in extension "SYSSY - TYPO3 Monitoring & Security Checks" (syssy)

CVE-2026-77130

Insufficient Session Expiration in extension "SYSSY - TYPO3 Monitoring & Security Checks" (syssy) PUBLISHED

Description (CNA)

The extension fails to properly validate the expiration of a client-supplied JWT token, allowing an attacker in control of a valid API key to authenticate with an expired token. Exploitation requires the attacker to already be in control of the SYSSY project's API key.

Affected (CNA)

Vendor / product	Versions
TYPO3 / Extension "SYSSY - TYPO3 Monitoring & Security Checks"	affected 0 before 3.0.6

CWE

CWE-613

References

https://typo3.org/security/advisory/typo3-ext-sa-2026-015

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.