TYPO3-EXT-SA-2026-014: Remote Code Execution in extension "HTML5 Video Player vs. Powermail" (html5videoplayer_powermail)

PKSA-6xxy-q4qw-wtq1 CVE-2026-77138

Affected package: lochmueller/html5videoplayer-powermail

Affected version: <=0.2.1

Reported by:
FriendsOfPHP/security-advisories