https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 16:11:48 +0000 https://vulnerability.circl.lu/vuln/cve-2026-77146 <p><strong>Affected:</strong> TYPO3 Extension &#34;femanager&#34;</p> <p>The extension&#39;s invitation controller fails to stop processing after redirecting on invalid input (missing hash, non-existent, disabled, or deleted users), allowing an unauthenticated attacker to set a new password for and re-enable an arbitrary existing frontend user account. This vulnerability is only present in the 8.x versions of the extension.</p> <p><strong>Affected:</strong> TYPO3 Extension &#34;femanager&#34;</p> <p>The extension&#39;s invitation controller fails to stop processing after redirecting on invalid input (missing hash, non-existent, disabled, or deleted users), allowing an unauthenticated attacker to set a new password for and re-enable an arbitrary existing frontend user account. This vulnerability is only present in the 8.x versions of the extension.</p> https://vulnerability.circl.lu/vuln/cve-2026-77146