Medium severityNVD Advisory· Published Aug 25, 2026

CVE-2026-77131

Description

When OpenSSL is unavailable on the server, the extension transmits TYPO3 system information in cleartext instead of encrypting it. Exploitation requires the attacker to already be in control of the SYSSY project's API key.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

TYPO3/SYSSY - TYPO3 Monitoring & Security Checksllm-create
TYPO3/SYSSYllm-create

Patches

Vulnerability mechanics

References

typo3.org/security/advisory/typo3-ext-sa-2026-015nvd

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000