CVE-2026-77130 — Insufficient Session Expiration in extension "SYSSY - TYPO3 Monitoring & Security Checks" (syssy)
The extension fails to properly validate the expiration of a client-supplied JWT token, allowing an attacker in control of a valid API key to authenticate with an expired token.…
Published: 2026-08-25 · CVSS: 5.3 · CVSS 4.0
The extension fails to properly validate the expiration of a client-supplied JWT token, allowing an attacker in control of a valid API key to authenticate with an expired token. Exploitation requires the attacker to already be in control of the SYSSY project's API key.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7