Medium severityNVD Advisory· Published Aug 25, 2026· Updated Aug 26, 2026

CVE-2026-77131

Description

When OpenSSL is unavailable on the server, the extension transmits TYPO3 system information in cleartext instead of encrypting it. Exploitation requires the attacker to already be in control of the SYSSY project's API key.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

TYPO3/TYPO3 systemllm-create

Patches

Vulnerability mechanics

References

typo3.org/security/advisory/typo3-ext-sa-2026-015nvd

News mentions

TYPO3: 24 Vulnerabilities Disclosed, Including Critical RCE and Code Execution Flaws
Vypr Intelligence · Aug 25, 2026

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000