CVE-2026-77131 — Cleartext Transmission of Sensitive Information in extension "SYSSY - TYPO3 Monitoring & Security Checks" (syssy)

CVE-2026-77131

Cleartext Transmission of Sensitive Information in extension "SYSSY - TYPO3 Monitoring & Security Checks" (syssy) PUBLISHED

Description (CNA)

When OpenSSL is unavailable on the server, the extension transmits TYPO3 system information in cleartext instead of encrypting it. Exploitation requires the attacker to already be in control of the SYSSY project's API key.

Affected (CNA)

Vendor / product	Versions
TYPO3 / Extension "SYSSY - TYPO3 Monitoring & Security Checks"	affected 0 before 3.0.6

CWE

CWE-319

References

https://typo3.org/security/advisory/typo3-ext-sa-2026-015

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.