Mail Backend Module Vulnerability in TYPO3

CVE-2026-120329

What is CVE-2026-120329?

The mail backend module in TYPO3 has a configuration oversight where submitted settings can be written to the TSconfig page without proper restrictions. This flaw allows backend users with access to the mail module to alter arbitrary TSconfig settings, potentially leading to unauthorized access or modification of site configuration.

References