TYPO3-EXT-SA-2026-037: Open Redirection in extension "Mail" (mail)

PKSA-b2p7-6qcf-92nb CVE-2026-120327

Affected version: >=4.0.0,<4.2.0|<3.12.5

Reported by:
FriendsOfPHP/security-advisories

TYPO3-EXT-SA-2026-037: Information Disclosure in extension "Mail" (mail)

PKSA-b657-vnvm-qnk7 CVE-2026-120328

Affected version: >=4.0.0,<4.2.0|<3.12.5

Reported by:
FriendsOfPHP/security-advisories

TYPO3-EXT-SA-2026-037: Broken Access Control in extension "Mail" (mail)

PKSA-p6j1-yhwr-yntb CVE-2026-120329

Affected version: >=4.0.0,<4.2.0|<3.12.5

Reported by:
FriendsOfPHP/security-advisories

TYPO3-EXT-SA-2026-037: Broken Access Control in extension "Mail" (mail)

PKSA-833v-cnnh-wds7 CVE-2026-120330

Affected version: >=4.0.0,<4.2.0|<3.12.5

Reported by:
FriendsOfPHP/security-advisories

TYPO3-EXT-SA-2026-037: Server-Side Request Forgery in extension "Mail" (mail)

PKSA-spg7-jb73-vpnk CVE-2026-120331

Affected version: >=4.0.0,<4.2.0|<3.12.5

Reported by:
FriendsOfPHP/security-advisories

TYPO3-EXT-SA-2026-037: Cross-Site Scripting in extension "Mail" (mail)

PKSA-t76y-hqn1-zzxw CVE-2026-120332

Affected version: >=4.0.0,<4.2.0|<3.12.5

Reported by:
FriendsOfPHP/security-advisories