https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-06T00:50:05.315915+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-120328 CVE-2026-120328 — Information Disclosure in extension "Mail" (mail) 2026-11-06T00:50:05.317464+00:00

Affected: TYPO3 Extension "Mail"

The click tracking middleware does not validate the authentication code of a recipient if the code is omitted. Unauthenticated attackers can retrieve personal data of newsletter recipients, which is inserted into links of sent mails.